{"vulnerability": "2026-62", "sightings": [{"uuid": "45ba23f2-c702-4674-beb9-89fa298dfbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6204", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjf5thpfxt2o", "content": "", "creation_timestamp": "2026-04-13T15:15:11.385939Z"}, {"uuid": "73c46fbc-a23e-42f2-8c0d-3a0a20a3ffb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfo7vg7zr2w", "content": "", "creation_timestamp": "2026-04-13T20:08:28.153532Z"}, {"uuid": "f46442f3-b188-4193-a2b7-9e64a096a116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfofgbqjr2w", "content": "", "creation_timestamp": "2026-04-13T20:11:33.634628Z"}, {"uuid": "48050628-f0b1-4c27-845c-7df4e7c9e554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjfqpqpt2s2r", "content": "", "creation_timestamp": "2026-04-13T20:53:07.673154Z"}, {"uuid": "b919ea8f-fc83-43ab-a05b-ecd15e021f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgam3hz7s2o", "content": "", "creation_timestamp": "2026-04-14T01:37:24.395831Z"}, {"uuid": "b2b862a0-6ff8-4eb1-8e63-2554cd37e5f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6220", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgauzyo6p2t", "content": "", "creation_timestamp": "2026-04-14T01:42:24.839729Z"}, {"uuid": "867156f3-a7da-4db3-8efc-3da14446201e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgbpwk74k23", "content": "", "creation_timestamp": "2026-04-14T01:57:27.320002Z"}, {"uuid": "d8ea8128-c9a4-43b4-b3fe-a2f84ee3ecd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6264", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116400824547176921", "content": "", "creation_timestamp": "2026-04-14T03:00:29.563529Z"}, {"uuid": "b389cd62-ee32-4ea4-bd1a-20a734910690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6264", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjgfaosg362i", "content": "", "creation_timestamp": "2026-04-14T03:00:32.374147Z"}, {"uuid": "069f4520-23c2-42b8-ac00-ca02a44472ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjgimj4wrk2k", "content": "", "creation_timestamp": "2026-04-14T04:00:49.803815Z"}, {"uuid": "3f8541ed-6e4f-42f1-a71e-282fe8c40d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgjgdxtzo2w", "content": "", "creation_timestamp": "2026-04-14T04:15:15.528504Z"}, {"uuid": "b956836d-3fa1-4ca8-bca4-33252c3cd12a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjgkjrrpid2m", "content": "", "creation_timestamp": "2026-04-14T04:35:06.200313Z"}, {"uuid": "092cb914-a15f-490d-9d05-67a9471825c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjgviuvync2h", "content": "", "creation_timestamp": "2026-04-14T07:51:35.444642Z"}, {"uuid": "7293f112-c8b5-425b-a1eb-3204119353cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjgviwtzyk2h", "content": "", "creation_timestamp": "2026-04-14T07:51:36.036103Z"}, {"uuid": "e55f91ac-05d8-4232-9c7f-97e7b89083e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjgvj2pswk2h", "content": "", "creation_timestamp": "2026-04-14T07:51:36.533518Z"}, {"uuid": "2ca72e7d-b44a-43c6-9f9b-0f67f64ac2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-6203.yaml", "content": "", "creation_timestamp": "2026-04-14T06:22:16.000000Z"}, {"uuid": "51dbca02-7dcb-4069-af44-e9410c8286d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-critical-remote-code-execution-talend-jobserver-and-talend-runtime-patch", "content": "", "creation_timestamp": "2026-04-14T09:13:09.000000Z"}, {"uuid": "bd9d5e1d-6f0b-401f-91f1-6d84a0097a28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6246", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkcjmakig72s", "content": "", "creation_timestamp": "2026-04-25T07:33:06.158782Z"}, {"uuid": "38c70da0-d14d-4fac-88f5-a347ce1cbc37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjjhgs6p7x2m", "content": "", "creation_timestamp": "2026-04-15T08:17:42.357907Z"}, {"uuid": "e938e122-8aec-408f-b40d-7527ae72ae7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6293", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116409411290435695", "content": "", "creation_timestamp": "2026-04-15T15:24:12.166979Z"}, {"uuid": "dd9b6ef3-e82a-41d7-b10e-bbcdd5547c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkmky75mp23", "content": "", "creation_timestamp": "2026-04-15T19:22:11.715819Z"}, {"uuid": "383bf910-8631-434a-b138-42b3f3695d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mjks6khlik23", "content": "", "creation_timestamp": "2026-04-15T21:02:43.746818Z"}, {"uuid": "f7bf16f8-9dbf-45fb-8b1c-cd975a17918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkujjp3g72k", "content": "", "creation_timestamp": "2026-04-15T21:44:32.642263Z"}, {"uuid": "e808e93f-b513-4347-b91b-20b89fd48278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjkvef45mc2k", "content": "", "creation_timestamp": "2026-04-15T21:59:33.804908Z"}, {"uuid": "ada14c21-c0be-462a-baa3-baa6117d299b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "5d083267-822c-4e24-8ba4-6a5534460ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "4afc50ae-fcc4-45fb-8ea7-ca5658c64ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6298", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "45d7cc2e-0b1e-4553-9aed-5b3048f6c677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260416", "content": "", "creation_timestamp": "2026-04-15T18:00:00.000000Z"}, {"uuid": "82d486c2-ec45-4bd9-a34d-862c8c3527b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjm45acvxk23", "content": "", "creation_timestamp": "2026-04-16T09:33:38.875575Z"}, {"uuid": "8f56cf54-7331-4713-8db0-07242768c5de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjm45fsvsc23", "content": "", "creation_timestamp": "2026-04-16T09:33:39.411790Z"}, {"uuid": "7f171122-cdb8-43c2-b3ca-00d907fdddb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mjm45fsyq223", "content": "", "creation_timestamp": "2026-04-16T09:33:39.957038Z"}, {"uuid": "da341970-d7b3-4d35-a4ad-35e3f227b5ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6270", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mjmki3smik2n", "content": "", "creation_timestamp": "2026-04-16T13:50:08.717203Z"}, {"uuid": "f094aa3b-6a6c-44a5-8ad8-b9021df9afce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6284", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-106-02", "content": "", "creation_timestamp": "2026-04-16T10:00:00.000000Z"}, {"uuid": "8a9178d4-37a0-4c1c-94de-b45ae954f507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6284", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpdelzgm22h", "content": "", "creation_timestamp": "2026-04-17T16:20:53.312821Z"}, {"uuid": "c064488f-90bf-40ce-87c8-a01d7a24056e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6284", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116421113386777545", "content": "", "creation_timestamp": "2026-04-17T17:00:13.602537Z"}, {"uuid": "9177e305-e678-4109-a5bc-5a1b1c720333", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6284", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjpfky5c272z", "content": "", "creation_timestamp": "2026-04-17T17:00:14.529039Z"}, {"uuid": "f8faf114-1806-4cb5-a27a-317651031347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjphmxtje42o", "content": "", "creation_timestamp": "2026-04-17T17:37:08.764252Z"}, {"uuid": "ea7a0a87-4b43-40c0-9a6b-d6f6161efeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpiyfy7aa2i", "content": "", "creation_timestamp": "2026-04-17T18:01:26.504345Z"}, {"uuid": "c83317b7-73af-41b6-ad6a-7453c8e86c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpiyn7wbr27", "content": "", "creation_timestamp": "2026-04-17T18:01:34.248159Z"}, {"uuid": "2e77a482-fbee-42e1-9326-2bd7f36abe9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6284", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mjpkecwd6o2k", "content": "", "creation_timestamp": "2026-04-17T18:25:59.747814Z"}, {"uuid": "66a5377d-ee92-44ac-9ccb-da45b81cc224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6284", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mjplqzkvxg2v", "content": "", "creation_timestamp": "2026-04-17T18:50:59.184758Z"}, {"uuid": "8bfe1b55-4e91-499b-ae62-5f1d2ae71987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjpqcu7hqe2c", "content": "", "creation_timestamp": "2026-04-17T20:12:33.416139Z"}, {"uuid": "8e7f03cf-9135-468a-bd66-73b412e5e291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6203", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mjqwdtxele2u", "content": "", "creation_timestamp": "2026-04-18T07:33:08.180990Z"}, {"uuid": "caff0565-39f2-4142-9cba-01e830517bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k", "content": "", "creation_timestamp": "2026-04-19T02:43:24.305961Z"}, {"uuid": "047bc2dc-34e9-4a03-aca0-d876ca7400e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6298", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k", "content": "", "creation_timestamp": "2026-04-19T02:43:24.401302Z"}, {"uuid": "bce7915e-96bc-4e89-b22e-6f2d86050978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k", "content": "", "creation_timestamp": "2026-04-19T02:43:24.490649Z"}, {"uuid": "df3a45da-02bd-4263-9e94-854d9d855339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mjswmnvypc2k", "content": "", "creation_timestamp": "2026-04-19T02:43:24.579145Z"}, {"uuid": "2afb0bb0-41ff-48ec-910c-44dd319f6f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6298", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "0577a244-fd83-48ab-aa79-96c3f4e3e211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "17b11f26-fedd-4695-9536-afb97968ef4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "d0e63bf0-d7ef-4908-9381-fc202ef59f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260420", "content": "", "creation_timestamp": "2026-04-19T20:00:00.000000Z"}, {"uuid": "f4343d0a-4af6-4f2b-bbd4-ea07b44d6cc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mjwgazwmr62b", "content": "", "creation_timestamp": "2026-04-20T12:01:12.307961Z"}, {"uuid": "314db0b5-7eb9-4559-88d0-7d35035c9fe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6248", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxb2ls3i62n", "content": "", "creation_timestamp": "2026-04-20T20:00:46.875134Z"}, {"uuid": "20e8ce23-0701-4d16-bac8-0541db2eeb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6257", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxccsfnrj2q", "content": "", "creation_timestamp": "2026-04-20T20:23:17.177683Z"}, {"uuid": "408946b1-ce0e-4415-a448-f39e424c1b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6249", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mjxcdboxxr2c", "content": "", "creation_timestamp": "2026-04-20T20:23:33.410647Z"}, {"uuid": "9bf96f94-e37e-45c3-b66b-411a82512e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6257", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mjxti623hn2g", "content": "", "creation_timestamp": "2026-04-21T01:30:30.068666Z"}, {"uuid": "88ea08af-2d69-4bf6-b56e-0a17c71e1d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjzyzwe5fc2t", "content": "", "creation_timestamp": "2026-04-21T22:15:17.574161Z"}, {"uuid": "c37e782a-8625-4b87-9f18-ac4657a4cc2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjzyzwe5fc2t", "content": "", "creation_timestamp": "2026-04-21T22:15:17.674024Z"}, {"uuid": "9f099374-3195-42c4-809e-e0b4bff325b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6298", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjzyzwe5fc2t", "content": "", "creation_timestamp": "2026-04-21T22:15:17.766553Z"}, {"uuid": "d6bf2582-e628-452e-a7d9-43f4f9622ea1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mjzyzwe5fc2t", "content": "", "creation_timestamp": "2026-04-21T22:15:17.861217Z"}, {"uuid": "80b344cc-5aaf-4b2a-af49-7f4a3a4701ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6227", "type": "seen", "source": "https://t.me/GithubRedTeam/80154", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6227\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Pixel-DefaultBR\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-13 16:17:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-13T17:00:04.000000Z"}, {"uuid": "12621cd9-3dd0-4531-b0c4-bfe49cd661c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3bquwmcy2c", "content": "", "creation_timestamp": "2026-04-22T10:23:53.440488Z"}, {"uuid": "8a29abe7-3a16-424e-87ed-36f5914180a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mk3ffgvdu22i", "content": "", "creation_timestamp": "2026-04-22T11:29:04.812613Z"}, {"uuid": "d8ee7861-0a9b-4e09-bb39-956923d41889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6246", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3j74ii6v2n", "content": "", "creation_timestamp": "2026-04-22T12:37:07.843143Z"}, {"uuid": "4f26c663-5bd4-4dd6-8d6f-5e053625bd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mk3jf3ktum2k", "content": "", "creation_timestamp": "2026-04-22T12:40:27.962952Z"}, {"uuid": "9e4f0941-5cd2-46b6-8081-d62a37d12bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mk4cjti3ul2e", "content": "", "creation_timestamp": "2026-04-22T20:10:31.244781Z"}, {"uuid": "5cc1ce60-1abf-484f-ab58-cabd8c04ced3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mk5ya6ubso25", "content": "", "creation_timestamp": "2026-04-23T12:11:29.650809Z"}, {"uuid": "9eee8ada-4d72-434b-8e4d-3f52a85db912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6290", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mk7a7u6q7g25", "content": "", "creation_timestamp": "2026-04-24T00:07:07.950053Z"}, {"uuid": "1e0cb9ba-1c0d-458f-acf9-ba4f954d5cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkcqct7vmr2s", "content": "", "creation_timestamp": "2026-04-25T09:33:06.898912Z"}, {"uuid": "593180e9-efcb-4c29-84f2-93b5b6551f47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6294", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkcwzfwzdo2l", "content": "", "creation_timestamp": "2026-04-25T11:33:07.817549Z"}, {"uuid": "2da84d5e-a041-4790-b97a-c479d6ae3bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6290", "type": "published-proof-of-concept", "source": "Telegram/_QjGcBmjsxbZ4Amc1U1V8p7QxKw60FZ8Kw92T8xX9Q9AP7c", "content": "", "creation_timestamp": "2026-04-15T19:22:05.000000Z"}, {"uuid": "54e9640a-c327-400f-89e8-ff5e7e366d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6270", "type": "seen", "source": "Telegram/5D912vOHN-G66auq1Hho6ww_p26h6YJ5ZFpozWyyt1z6weM", "content": "", "creation_timestamp": "2026-04-16T15:19:53.000000Z"}, {"uuid": "2205efba-f83b-404b-ac4f-4964ae0bb1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6299", "type": "published-proof-of-concept", "source": "Telegram/Dn6UYWmEFhbqEaa4T9ZHT6FP05ZyLAZt2ntZ1ss8t6QaCo0", "content": "", "creation_timestamp": "2026-04-15T23:26:33.000000Z"}, {"uuid": "20118085-ecfb-4b31-887f-0af4d6774588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg", "content": "", "creation_timestamp": "2026-04-15T23:26:09.000000Z"}, {"uuid": "7b99bf57-0030-4c74-931d-334a8ba845b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "Telegram/uDqb5UNOJD19g19jmJKdnJBBrEUml8WxLQrnFn708j03zpg", "content": "", "creation_timestamp": "2026-04-15T23:26:09.000000Z"}, {"uuid": "7c3be284-a2d4-47d5-9fb5-72fbe831f155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6227", "type": "seen", "source": "Telegram/VN5qpdZvC1XQa0kocwrxs34zDP5KgO9Hh_vqtOghSHVfgqA", "content": "", "creation_timestamp": "2026-04-14T05:17:21.000000Z"}, {"uuid": "8aa9656d-b37d-4ca4-800e-4b9c5bdc1d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "Telegram/VN5qpdZvC1XQa0kocwrxs34zDP5KgO9Hh_vqtOghSHVfgqA", "content": "", "creation_timestamp": "2026-04-14T05:17:21.000000Z"}, {"uuid": "66e9d2b0-aea2-4803-83a7-1f2f35045cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6204", "type": "published-proof-of-concept", "source": "Telegram/Eww91bUMv30vOGGH8yfYO_7hUDha4B8YRA_tK9kM1Vo3PCM", "content": "", "creation_timestamp": "2026-04-13T13:15:33.000000Z"}, {"uuid": "37e26800-a420-4eb4-9cdd-0e8b1d81d75e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6227", "type": "published-proof-of-concept", "source": "Telegram/Jeul2EvprL3_hH1xvWkayHz4l2vevKD0W-_dzxiA_dwei0o", "content": "", "creation_timestamp": "2026-04-13T19:00:13.000000Z"}, {"uuid": "90828537-43af-436d-8726-64bd9f64f80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6200", "type": "published-proof-of-concept", "source": "Telegram/E9uORDS5VkHsQsN2ALVesQEvtj4s64kK7xuccSs6pLn_-94", "content": "", "creation_timestamp": "2026-04-13T21:22:51.000000Z"}, {"uuid": "46eb7cba-876d-4d13-b7be-15abc96c7145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6224", "type": "published-proof-of-concept", "source": "Telegram/_DNd18EV1_mvoOjDBqQ_at4zOgBzw_-F-OvAJ7pAjcWk8VU", "content": "", "creation_timestamp": "2026-04-13T23:21:32.000000Z"}, {"uuid": "47f08407-5a55-4476-929b-7dc9f15240d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6264", "type": "seen", "source": "Telegram/EXit4BCARRaTXD4SBLqO-yd3UPN_B5jBijYowsPR2aTE5HY", "content": "", "creation_timestamp": "2026-04-14T05:17:42.000000Z"}, {"uuid": "d8e92182-66ff-4fa8-b7f6-1c88bed0dce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6236", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mkdb3b2soi2s", "content": "", "creation_timestamp": "2026-04-25T14:33:06.238260Z"}, {"uuid": "f21b5eee-5f6f-4755-9841-08a7cb6c9069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6296", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "cdefcd15-3336-40f8-9391-b280d9071f69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6299", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "36a3994b-15c8-4084-a894-ff0094228ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "a6b3a2b0-5954-49e5-8052-f4fa9abdff3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6298", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/chromeos-multiple-vulnerabilities_20260428", "content": "", "creation_timestamp": "2026-04-27T20:00:00.000000Z"}, {"uuid": "0811bc64-3c94-473e-91c4-3d8c12f95ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6238", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mklfyc2yf52v", "content": "", "creation_timestamp": "2026-04-28T20:22:13.002521Z"}, {"uuid": "94de32d3-1fef-474e-b793-aae4963f1225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6276", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmjoj7gm52b", "content": "[ADVISORY] curl: CVE-2026-6276: stale custom cookie host causes cookie leak", "creation_timestamp": "2026-04-29T07:00:59.702978Z"}, {"uuid": "7b8b7bfd-6573-478f-befc-2d5db46fb735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6253", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mkmjxidnro2m", "content": "[ADVISORY] curl: CVE-2026-6253: proxy credentials leak over redirect-to proxy", "creation_timestamp": "2026-04-29T07:06:00.983858Z"}, {"uuid": "08d41b6a-34cf-4c64-9e7b-5cbb873b957a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6253", "type": "seen", "source": "https://mastodon.social/users/bagder/statuses/116486743707813679", "content": "Out of the eight new #curl CVEs, four of them had existed in code for over twenty years when we published.\nCVE-2026-5545 clocks in at 22.75 years old\nCVE-2026-7168 at 21.91 years\nCVE-2026-6429 at 20.95 years\nCVE-2026-6253 at 20.66 years\nAnd yet CVE-2026-5545 only becomes the 5th oldest vulnerability ever found in curl so far.", "creation_timestamp": "2026-04-29T07:10:54.470048Z"}, {"uuid": "d00abaa2-defc-4db2-9659-e280dc27cd31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6253", "type": "seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mkmkagqvtir2", "content": "Out of the eight new #curl CVEs, four of them had existed in code for over twenty years when we published.\n\nCVE-2026-5545 clocks in at 22.75 years old\n\nCVE-2026-7168 at 21.91 years\n\nCVE-2026-6429 at 20.95 years\n\nCVE-2026-6253 at 20.66 years\n\nAnd yet CVE-2026-5545 only becomes the 5th oldest [\u2026]", "creation_timestamp": "2026-04-29T07:11:04.742903Z"}, {"uuid": "b23b88c3-78d9-433b-8607-279735859c54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6284", "type": "seen", "source": "Telegram/bhyT7i4V2BArCJwfUMt9o2_rqwfY7TKMJyzxFMsGDU3QsWI", "content": "", "creation_timestamp": "2026-04-17T17:31:16.000000Z"}, {"uuid": "40ed2d65-59b7-4364-9e9b-0ea7e5ffe19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6272", "type": "seen", "source": "Telegram/R09lntrMGCA8cSztnGDF2KvsmTIw4mOAN79EUbfCdjOI6Yc", "content": "", "creation_timestamp": "2026-04-24T11:16:14.000000Z"}, {"uuid": "50acd363-cfb8-40e9-a46d-be1c8273e691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6248", "type": "seen", "source": "Telegram/afpqx5U4BmLApg0vDDGxSmW2u1LMTzTENI3LCYVeeaEOYCo", "content": "", "creation_timestamp": "2026-04-20T21:22:08.000000Z"}, {"uuid": "20f225f2-280b-49c4-a527-5e7c1fa4b79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "seen", "source": "Telegram/sPwjOPhzuGx5b1hPjpY5cTeDX3Wq80JN4ZLbGBscqo84ews", "content": "", "creation_timestamp": "2026-04-22T11:16:22.000000Z"}, {"uuid": "f49dce66-9b81-4d7d-a08a-9b5b31c0db5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6235", "type": "published-proof-of-concept", "source": "Telegram/4Ce1p0rz1Dwr7V7n_rROOlVF_ZDWJLAA0UiQHZa7V2KBLsc", "content": "", "creation_timestamp": "2026-04-22T11:16:16.000000Z"}, {"uuid": "a856f776-06d3-46e9-899f-0220404a129e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6249", "type": "published-proof-of-concept", "source": "Telegram/OLcxrKJ5zAhC__DZ5T6GCelVB_zr2kWns3QejwnSLKnpZyw", "content": "", "creation_timestamp": "2026-04-20T21:22:19.000000Z"}, {"uuid": "19603395-5249-41d4-bdf9-598c5288e8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6257", "type": "published-proof-of-concept", "source": "Telegram/OLcxrKJ5zAhC__DZ5T6GCelVB_zr2kWns3QejwnSLKnpZyw", "content": "", "creation_timestamp": "2026-04-20T21:22:19.000000Z"}, {"uuid": "4f8fca40-b0f6-4bf5-a324-3444961d0da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6253", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4vufiap2k", "content": "\ud83d\udd17 CVE : CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168, CVE-2024-11053, CVE-2026-1965, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168", "creation_timestamp": "2026-04-29T12:45:07.732912Z"}, {"uuid": "7e566434-d7f9-46cc-88e1-a1ebff46b6fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6276", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mkn4vufiap2k", "content": "\ud83d\udd17 CVE : CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168, CVE-2024-11053, CVE-2026-1965, CVE-2026-4873, CVE-2026-5545, CVE-2026-5773, CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7009, CVE-2026-7168", "creation_timestamp": "2026-04-29T12:45:07.910541Z"}, {"uuid": "1f7bcb31-6eab-4a4b-bf13-0899ba5ff6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrthq3sak42p", "content": "The latest GitLab patch release fixes 13 vulnerabilities, including CVE-2026-6267, a high-severity data exposure flaw. Update self-managed GitLab now.\n\n#GitLab #CVE20266267 #DevSecOps #Vulnerability #PatchNow #InfoSec", "creation_timestamp": "2026-07-30T03:11:06.368813Z"}, {"uuid": "1047e4c2-5799-402a-9f46-b09407b23801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrtkubul3h23", "content": "\ud83d\udccc CVE-2026-62835 - Improper authorization in Azure Portal allows an unauthorized attacker to disclose information over a network. https://www.cyberhub.blog/cves/CVE-2026-62835", "creation_timestamp": "2026-07-30T04:07:06.775195Z"}, {"uuid": "916e8d16-908a-4254-a4ed-b99923a3ab18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrumu73k2a2n", "content": "\ud83d\udd17 CVE : CVE-2025-14562, CVE-2026-12436, CVE-2026-13113, CVE-2026-14341, CVE-2026-14351, CVE-2026-15077, CVE-2026-15831, CVE-2026-15975, CVE-2026-16553, CVE-2026-3093, CVE-2026-4672, CVE-2026-6267, CVE-2026-6336", "creation_timestamp": "2026-07-30T14:15:31.261347Z"}, {"uuid": "5aa92601-6f3b-477d-a5b0-462cfe9f139b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62433", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:10.868825Z"}, {"uuid": "72a406b7-5e59-462e-ba18-8496ecb86275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62431", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:13.231005Z"}, {"uuid": "3cc9a340-f629-4055-8531-afc08c5d186d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62426", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:22.663679Z"}, {"uuid": "858a926b-283b-4bc0-b5f1-efb38bb59592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62436", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:42.405327Z"}, {"uuid": "d24c009d-d9c5-47f9-8077-06740d4d8c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62423", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:20.312925Z"}, {"uuid": "e04520f7-8447-4dfb-9a75-a92e573942e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62424", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:37.631167Z"}, {"uuid": "77bdd15e-9eb8-443e-a9c2-534637295a57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62427", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:59.218846Z"}, {"uuid": "64647f1d-2eab-4ba9-a264-c5b890ba1880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62425", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:44.781164Z"}, {"uuid": "8db72d85-b266-4fcc-b987-fe76dee35a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62429", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:32.361115Z"}, {"uuid": "8df32878-ee75-4740-9628-493d87fb852e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62435", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:56.658508Z"}, {"uuid": "097c6a7b-9638-4b3c-9ff7-80a28d498ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62430", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:35.262189Z"}, {"uuid": "e5ccc78f-2de0-4c38-95b4-f761b2422296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62428", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:45:47.147690Z"}, {"uuid": "0a1906cd-0d87-4665-a5ba-b350f8977d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62432", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:46:13.642508Z"}, {"uuid": "f9d0bd16-8319-47d4-bbc2-5c967e5e5483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:46:06.340246Z"}, {"uuid": "7ca72dd4-f9ef-4339-8c8b-3a9b5784dd2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62434", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/xen-multiple-vulnerabilities_20260730", "content": "", "creation_timestamp": "2026-07-30T04:46:11.280900Z"}, {"uuid": "f42638d4-8848-4da6-80e4-2a0793b8ad03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62498", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrtasg4re62s", "content": "\ud83d\udccc CVE-2026-62498 - Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affec... https://www.cyberhub.blog/cves/CVE-2026-62498", "creation_timestamp": "2026-07-30T01:07:06.791204Z"}, {"uuid": "2f47a04c-23fa-4576-bfed-de2ccbe24de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62663", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mruzhjareg2e", "content": "\ud83d\udfe0 CVE-2026-62663 - High (7.5)\n\nBanks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62663/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T18:01:04.562812Z"}, {"uuid": "93643547-49e0-466d-98c9-57db8217e9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62416", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3myb6nvixzxk7", "content": "CVE-2026-62416 - Sharp Corporation Network Scanner Tool Unauthenticated Arbitrary File Upload and Denial of Service Vulnerability\nCVE ID : CVE-2026-62416\n \n Published : Aug. 3, 2026, 9:17 a.m. | 39\u00a0minutes ago\n \n Description : Network Scanner Tool and Network Scanner Tool Lite...", "creation_timestamp": "2026-08-03T10:10:55.237883Z"}, {"uuid": "0f5cfdd6-4364-475b-be6c-2a221150a31a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62904", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260831", "content": "", "creation_timestamp": "2026-08-31T04:45:12.666394Z"}, {"uuid": "30356687-9ba1-47fb-a047-a8d74d9ca691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62246", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrvk6yfyz32g", "content": "\ud83d\udfe0 CVE-2026-62246 - High (8.5)\n\nKamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62246/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-30T23:00:31.937031Z"}, {"uuid": "58ce1b9a-8936-4d00-b881-992178c9566b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62471", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muag4ciqfx2m", "content": "\ud83d\udccc CVE-2026-62471 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is ... https://www.cyberhub.blog/cves/CVE-2026-62471", "creation_timestamp": "2026-08-29T17:37:08.429677Z"}, {"uuid": "0b5706bd-3277-4ddb-81b0-738b92cb6af8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62416", "type": "seen", "source": "https://jvn.jp/en/vu/JVNVU92540957", "content": "", "creation_timestamp": "2026-07-31T04:45:40.552684Z"}, {"uuid": "969493b7-c4f8-4c77-b962-6e3bcf39626b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvirjkz22f", "content": "\ud83d\udfe0 CVE-2026-6266 - High (8.3)\n\nA flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T14:37:09.589600Z"}, {"uuid": "fad4998e-6030-4ac5-b633-25b5b763386f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvj7p6p52s", "content": "\ud83d\udfe0 CVE-2026-6266 - High (8.3)\n\nA flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T14:37:24.047045Z"}, {"uuid": "45c10fd5-c252-40c5-955c-301df1f6eb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkzvlc5esy2t", "content": "\ud83d\udfe0 CVE-2026-6266 - High (8.3)\n\nA flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6266/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T14:38:33.437691Z"}, {"uuid": "e17d3e65-faba-414c-a623-b1316620c55f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml24qpp75o2p", "content": "CVE-2026-6266 - Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking\nCVE ID : CVE-2026-6266\n \n Published : May 4, 2026, 2:16 p.m. | 2\u00a0hours, 4\u00a0minutes ago\n \n Description : A flaw was found in the AAP gateway. The user auto-link st...", "creation_timestamp": "2026-05-04T16:46:51.891638Z"}, {"uuid": "10902c89-3b95-4141-89be-22bcbf78f226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6255", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml3kucjzlh2h", "content": "CVE-2026-6255 - Simple Owl Shortcodes\nCVE ID : CVE-2026-6255\n \n Published : May 5, 2026, 3:16 a.m. | 3\u00a0hours, 5\u00a0minutes ago\n \n Description : The Simple Owl Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'num' attribute of the 'owls_wrapper...", "creation_timestamp": "2026-05-05T06:32:06.796035Z"}, {"uuid": "1034df5e-db7c-448f-bc28-bf3870bfc48d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62391", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/65sh4aa55lke2", "content": "CVE-2026-62391: Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases", "creation_timestamp": "2026-07-31T11:36:23.259623Z"}, {"uuid": "180b084d-d861-49d1-af7a-c707f50547ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml47qqdazm2k", "content": "CVE-2026-6261 - Betheme\nCVE ID : CVE-2026-6261\n \n Published : 5. Mai 2026 11:25 | 56\u00a0Minuten ago\n \n Description : The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4. This is due to the upload_icons() function workflow ...", "creation_timestamp": "2026-05-05T12:45:52.621571Z"}, {"uuid": "b02e5de9-f226-4dbc-9fde-6fc8ecc8950d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6262", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml4a6airkd2v", "content": "CVE-2026-6262 - Betheme\nCVE ID : CVE-2026-6262\n \n Published : 5. Mai 2026 11:24 | 56\u00a0Minuten ago\n \n Description : The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the upload_icons() function workflo...", "creation_timestamp": "2026-05-05T12:53:27.383102Z"}, {"uuid": "dd84a52b-2d17-4a21-a37e-64e0792f649f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml4mlxvrp72r", "content": "\ud83d\udfe0 CVE-2026-6261 - High (8.8)\n\nThe Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and inc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6261/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-05T16:35:52.458004Z"}, {"uuid": "f85aa036-8128-498e-8218-2fa762d83d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3ml5nxwwnu32t", "content": "CVE-2026-6229 royal-elementor-addons (CVSS Score 7.2) #WordPress plugin #vulnerability #potatosecurity #wordpressfirewall #wordpresssecurity #mashing #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T02:33:09.285383Z"}, {"uuid": "9c448849-8a9c-428c-871a-bd05f5032050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3ml5nxwigtp2q", "content": "CVE-2026-6229 royal-elementor-addons (CVSS Score 7.2) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-06T02:33:06.221050Z"}, {"uuid": "e9b4d46d-2e48-488d-a55e-9a616bc8a86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62496", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms6rm5hsju2q", "content": "\ud83d\udccc CVE-2026-62496 - Vulnerability in the Oracle Yard Management product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected... https://www.cyberhub.blog/cves/CVE-2026-62496", "creation_timestamp": "2026-08-03T15:07:07.692612Z"}, {"uuid": "c7a64b9d-e91e-44ef-b6f6-92e8bccc794f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62602", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muatjgxi3n2u", "content": "\ud83d\udccc CVE-2026-62602 - Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is... https://www.cyberhub.blog/cves/CVE-2026-62602", "creation_timestamp": "2026-08-29T21:37:06.680874Z"}, {"uuid": "046e2140-2638-48e6-a573-d932a56fbd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.592809Z"}, {"uuid": "376ec50d-27ce-488a-bba9-b0259ad4e3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62261", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrx3gewobb2y", "content": "Four OpenAM vulnerabilities are fixed in 16.1.2. CVE-2026-62379 (CVSS 9.8) allows unauthenticated remote code execution; CVE-2026-62261 scores 9.9.\n\n#OpenAM #RCE #IAM #CVE202662379", "creation_timestamp": "2026-07-31T13:41:33.643811Z"}, {"uuid": "74e519f1-c3ec-4de9-9178-410eacd1d524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ml6tj2dlhc2r", "content": "CVE-2026-6210 - Type confusion and heap-buffer-overflow in Qt SVG marker handling causing application crash\nCVE ID : CVE-2026-6210\n \n Published : May 6, 2026, 12:16 p.m. | 6\u00a0minutes ago\n \n Description : A type confusion vulnerability in Qt SVG allows an attacker to cause an ap...", "creation_timestamp": "2026-05-06T13:44:49.181175Z"}, {"uuid": "5b20b049-9d18-48a6-81b7-bd1099a6041d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3ml7rejkand2c", "content": "Betheme RCE 2026: actualiz\u00e1 ya a 28.4.1.1\n\n\u00bfUs\u00e1s Betheme 28.4? CVE-2026-6261 permite RCE a cualquier autor de tu sitio. Actualiz\u00e1 a 28.4.1.1 ya y audit\u00e1 uploads antes de que sea tarde.\n\n#betheme #cve20266261 #rcewordpress #cargaarchivosarbitrarios #seguridadtemaswordpress", "creation_timestamp": "2026-05-06T22:39:09.745772Z"}, {"uuid": "28418255-0126-4d2c-8a47-432cbd5f46ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6278", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mla5prthjg2v", "content": "CVE-2026-6278 - CVE-2019-1905: Cisco WebEx Meeting Center Unvalidated Redirect\nCVE ID : CVE-2026-6278\n \n Published : May 6, 2026, 11:16 p.m. | 1\u00a0hour, 8\u00a0minutes ago\n \n Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.\n \n ...", "creation_timestamp": "2026-05-07T02:20:12.221429Z"}, {"uuid": "e7a38be0-3a10-4fa3-9334-a52ea95a0261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6214", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlaivfxfjp2o", "content": "CVE-2026-6214 - Forminator Forms\nCVE ID : CVE-2026-6214\n \n Published : May 7, 2026, 3:27 a.m. | 57\u00a0minutes ago\n \n Description : The Forminator Forms plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 1.53.0. This is due to the listen_fo...", "creation_timestamp": "2026-05-07T05:40:12.248596Z"}, {"uuid": "b9e564f7-b9f4-4b09-b1de-ca5a8611a9df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-29T23:00:08.515658Z"}, {"uuid": "855b7b8e-a742-4476-a9fc-08bee877d498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6213", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116538489534406589", "content": "CRITICAL: Remote Spark SparkView (<1122) vuln (CVE-2026-6213) lets unauth attackers run code as root via untrusted input. Full server takeover possible. Restrict access & monitor. Patch status unconfirmed. https://radar.offseq.com/threat/cve-2026-6213-cwe-807-reliance-on-untrusted-inputs-51eef196 #OffSeq #CVE20266213 #infosec #remotespark", "creation_timestamp": "2026-05-08T10:30:30.799535Z"}, {"uuid": "b6c78e88-235c-4ba3-9f1c-fa7bf78c2616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6213", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mldjlhz44r2o", "content": "CRITICAL: Remote Spark SparkView (pre-1122) vuln lets unauth attackers execute root code. No patch yet \u2014 restrict access & monitor activity ASAP. https://radar.offseq.com/threat/cve-2026-6213-cwe-807-reliance-on-untrusted-inputs-51eef196 #OffSeq #CVE20266213 #cybersecurity", "creation_timestamp": "2026-05-08T10:30:32.510426Z"}, {"uuid": "b34804fb-7439-49c9-a57e-7a9913aadb3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6213", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldkyeuugy2q", "content": "CVE-2026-6213 - Remote Spark SparkView RCE\nCVE ID : CVE-2026-6213\n \n Published : May 8, 2026, 9:04 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A vulnerability in Remote Spark\u00a0SparkView before\u00a0build 1122 allows an attacker to bypasses the local connection check and achieve a...", "creation_timestamp": "2026-05-08T10:55:38.572048Z"}, {"uuid": "275a00b9-d9c5-4b28-9558-8e6a4d0e225a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62246", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrxkkywufs2i", "content": "CVE-2026-62246 - Kamaji tenant isolation bypass. Lossy name normalization lets tenants read, modify, or destroy other tenants' Kubernetes data. CVSS 8.5. Update to 26.7.4-edge immediately. #CVE #Kubernetes #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62246/", "creation_timestamp": "2026-07-31T18:12:34.255307Z"}, {"uuid": "b8af81c7-70e3-4cff-9bda-b9f4a92af62c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62324", "type": "published-proof-of-concept", "source": "https://github.com/xdan/jodit/security/advisories/GHSA-j839-gqq4-gf9j", "content": "", "creation_timestamp": "2026-07-31T20:35:20.233167Z"}, {"uuid": "11b2c424-a447-434c-a6a1-030fd8c8f4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-30T00:00:12.018542Z"}, {"uuid": "7f62d7c7-78a2-4038-a737-ff04420f03da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62999", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrxtwxnwbd2l", "content": "\ud83d\udfe0 CVE-2026-62999 - High (7.5)\n\nCopier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, perce...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62999/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-31T21:00:19.626820Z"}, {"uuid": "494b7cf4-1df5-4d50-a7ab-35ba4cd207fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62504", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxvyr24go2r", "content": "\ud83d\udccc CVE-2026-62504 - Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected ... https://www.cyberhub.blog/cves/CVE-2026-62504", "creation_timestamp": "2026-07-31T21:37:07.427498Z"}, {"uuid": "2a32d56f-0168-4b34-83ae-1aa8b421c71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62959", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/duejp3dwq35n3", "content": "CVE-2026-62959 - Coturn: Pre-authentication heap memory disclosure in ACME redirect (`try_acme_redirect`)\nCVE ID : CVE-2026-62959\n \n Published : July 31, 2026, 8:16 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : Coturn is a free open source implementation of TURN and STUN Serv...", "creation_timestamp": "2026-07-31T21:55:26.322176Z"}, {"uuid": "625a32f7-bab6-4857-84b5-d789e9e4c51d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62494", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxxoftnfo2d", "content": "\ud83d\udccc CVE-2026-62494 - Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected ... https://www.cyberhub.blog/cves/CVE-2026-62494", "creation_timestamp": "2026-07-31T22:07:07.243444Z"}, {"uuid": "6200faaa-84a3-45b3-9779-81a16f017f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62497", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrxzdzfnqa2d", "content": "\ud83d\udccc CVE-2026-62497 - Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affec... https://www.cyberhub.blog/cves/CVE-2026-62497", "creation_timestamp": "2026-07-31T22:37:06.762983Z"}, {"uuid": "7594a83a-29b4-4dba-921f-472620e74263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62468", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mry2zoxh3a2n", "content": "\ud83d\udccc CVE-2026-62468 - Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Enterprise Command Center).  Supported versions that are af... https://www.cyberhub.blog/cves/CVE-2026-62468", "creation_timestamp": "2026-07-31T23:07:06.878858Z"}, {"uuid": "89decd83-9a59-4e36-bd73-4021c904b6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62999", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62999", "content": "", "creation_timestamp": "2026-08-01T00:15:22.563578Z"}, {"uuid": "41cc5fde-4fc6-4b3e-a38b-d2936d407721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62959", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62959", "content": "", "creation_timestamp": "2026-08-01T00:15:24.735837Z"}, {"uuid": "a5020742-463c-412d-b69b-93caf0e4cce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62324", "type": "seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-62324", "content": "", "creation_timestamp": "2026-08-01T00:15:26.942060Z"}, {"uuid": "b465c807-5688-4f98-b8c7-1dcbf94e728d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6271", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlshon6mjj2k", "content": "CVE-2026-6271 - Career Section\nCVE ID : CVE-2026-6271\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 9\u00a0minutes ago\n \n Description : The Career Section plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.7 via the CV upload hand...", "creation_timestamp": "2026-05-14T09:06:26.504836Z"}, {"uuid": "871bd392-9c71-4108-bb13-cfd62c400314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6271", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mls72nq6sn2q", "content": "CVE-2026-6271 career-section (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-14T06:32:06.064410Z"}, {"uuid": "2faefadc-6cfc-47ba-9fee-d9c4a168ad41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlskhxod2l2i", "content": "CVE-2026-6225 - Taskbuilder \u2013 Project Management & Task Management Tool With Kanban Board\nCVE ID : CVE-2026-6225\n \n Published : May 14, 2026, 7:16 a.m. | 1\u00a0hour, 14\u00a0minutes ago\n \n Description : The Taskbuilder \u2013 Project Management & Task Management Tool With Kanban Board p...", "creation_timestamp": "2026-05-14T09:56:23.796744Z"}, {"uuid": "a186123a-1c99-42c7-8eb1-de6be4fffb16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6271", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116573171173966949", "content": "\u26a0\ufe0f CRITICAL: CVE-2026-6271 in shahinurislam Career Section plugin (\u22641.7) lets unauthenticated attackers upload dangerous files \u2014 risk of remote code execution. Disable plugin immediately & monitor uploads. https://radar.offseq.com/threat/cve-2026-6271-cwe-434-unrestricted-upload-of-file--9fe22087 #OffSeq #WordPress #RCE #Vulnerability", "creation_timestamp": "2026-05-14T13:30:30.822420Z"}, {"uuid": "11b81819-0ff0-4ced-8a03-dcd8d35e7dc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6206", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlswqxyrkg2q", "content": "CVE-2026-6206 - MW WP Form\nCVE ID : CVE-2026-6206\n \n Published : May 14, 2026, 9:16 a.m. | 3\u00a0hours, 14\u00a0minutes ago\n \n Description : The MW WP Form plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 5.1.2 via the _get_post_property_...", "creation_timestamp": "2026-05-14T13:36:11.875424Z"}, {"uuid": "07b9bd58-61cc-47df-9830-89ff9f9d1be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116605319339057363", "content": "A lot of offensive activities were identified targeting MuffinGroup Betheme Plugin (CVE-2026-6261) https://vuldb.com/vuln/361146/cti", "creation_timestamp": "2026-05-20T05:46:11.758378Z"}, {"uuid": "462b9fea-eb00-47a2-a676-54413b73a0d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmdtj6esyd2t", "content": "CVE-2026-6279 - Avada (Fusion) Builder\nCVE ID : CVE-2026-6279\n \n Published : May 21, 2026, 5:16 a.m. | 30\u00a0minutes ago\n \n Description : The Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in v...", "creation_timestamp": "2026-05-21T06:53:23.604636Z"}, {"uuid": "6bcdf49e-939c-4dbd-ae30-5efcfc3dc326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed3x6lqk2s", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-05-21T11:32:28.860473Z"}, {"uuid": "15db9a87-46d0-4425-8485-37dfd07939cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed42ahlc2s", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-05-21T11:32:29.460067Z"}, {"uuid": "064c737c-897c-4495-9986-dc4c5caeb500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mmed44knm22s", "content": "\ud83d\udea8 Critical WordPress flaw: CVE-2026-6279 impacts Avada Builder with unauthenticated remote code execution (CVSS 9.8).\n\nAttackers can abuse exposed AJAX functionality and unsafe PHP calls to fully compromise affected sites.\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#WordPress #CVE #CyberSecurity", "creation_timestamp": "2026-05-21T11:32:30.096609Z"}, {"uuid": "89359202-3d07-44af-90f9-c8f05117eba7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmen5gifsj2l", "content": "CVE-2026-6279 fusion-builder (CVSS Score 9.8) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-21T14:32:06.794810Z"}, {"uuid": "257403b5-27c4-4102-8ecc-8385bec63c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62354", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3ms7vng7zoz24", "content": "Apache NiFi vulnerabilities, including CVE-2026-68979, CVE-2026-62354, and CVE-2026-68981, expose users to code execution and resource consumption.\n\n#ApacheNiFi #CyberSecurity #Vulnerabilities #CVE #InfoSec", "creation_timestamp": "2026-08-04T01:52:04.806596Z"}, {"uuid": "8878ba4c-ad10-4f24-9416-4dcc0c03fcec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://t.me/GithubRedTeam/85531", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 09:53:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279 \u2014 Avada Builder <= 3.15.2 Unauthenticated RCE via call_user_func()\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T10:00:04.000000Z"}, {"uuid": "80135d4d-ef64-4e9b-9599-04a62d971b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "Telegram/YOQGsHs7r9jLQhgNqTX3PSQIcC6Mwf3lNqWfwu3WHaM-0RY", "content": "", "creation_timestamp": "2026-05-23T11:00:10.000000Z"}, {"uuid": "bbc362e7-45a0-4256-a356-81e8d9eea1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "Telegram/_KWAnd6RR6PDJnxcxd09YuafzYNN0qOVlN75nUN-G9yG8iw", "content": "", "creation_timestamp": "2026-05-23T15:00:07.000000Z"}, {"uuid": "911eb6c6-0a7a-4c13-8382-9aa8a2d8b130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "Telegram/Otu6Jbe8lDXdP_SNoyBScRz6BIgHRvrsI4mTky3IQgsujWk", "content": "", "creation_timestamp": "2026-05-23T07:00:10.000000Z"}, {"uuid": "b903e672-96f2-4e9a-b573-9f9203bdd825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62870", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gjehc7f2gjrar", "content": "CVE-2026-62870 - Microsoft Excel Remote Code Execution Vulnerability\nCVE ID : CVE-2026-62870\n \n Published : Aug. 4, 2026, 12:17 a.m. | 1\u00a0hour, 28\u00a0minutes ago\n \n Description : Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a networ...", "creation_timestamp": "2026-08-04T02:07:18.239258Z"}, {"uuid": "348e7d33-ef67-40b5-8b81-e90a702e4c6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62574", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz62gjkhh22", "content": "CVE-2026-62574: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Oracle Java SE \u0438 GraalVM - \u043a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0442 \u0443\u0433\u0440\u043e\u0437\u044b\n\n\n\nhttps://kripta.biz/posts/E4740D83-7674-40C3-BE38-1D4951030A5A", "creation_timestamp": "2026-08-01T09:33:52.449752Z"}, {"uuid": "193ddb19-25ff-4ce7-b7c2-187d9cbb1f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cbcmrvdiup5yg", "content": "CVE-2026-62927 - Eclipse Milo Authorization Bypass via Batch Processing\nCVE ID : CVE-2026-62927\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to addres...", "creation_timestamp": "2026-08-04T13:54:28.283774Z"}, {"uuid": "3e41953d-52ed-4f69-87df-7f0b96856048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6271", "type": "seen", "source": "https://t.me/GithubRedTeam/85916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6271\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a xxconi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-26 05:56:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-26T06:00:04.000000Z"}, {"uuid": "8175f8f3-c69f-420c-9bdb-8e95b27666fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:30.928765Z"}, {"uuid": "b8a84e39-97fd-4070-a605-21f78449d5e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:31.116008Z"}, {"uuid": "9851b6d6-5c8b-45af-aa10-b6476792febe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:32.240908Z"}, {"uuid": "7c0e2f86-84d0-482b-9676-96b5854f6c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:32.714494Z"}, {"uuid": "987d4565-b08f-4f30-a77f-cca8c37ce293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:33.209484Z"}, {"uuid": "9dc41cf8-3ac3-4679-bf46-840c914abd28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:33.379483Z"}, {"uuid": "ba91c905-2629-4bef-a4d8-3dd25677a797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:33.602593Z"}, {"uuid": "6dd9932a-a4e5-4935-9970-39eb75f5ba09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:45.978671Z"}, {"uuid": "96190907-6ab6-492f-a27a-5380e32e4b7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:46.300996Z"}, {"uuid": "02bfebc3-4044-4422-ad7c-2025f0329a9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:33.775270Z"}, {"uuid": "46923af3-5907-4146-ae0b-9adbcd1ff730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:34.626019Z"}, {"uuid": "9009bcbb-9c95-4f8b-9381-35db92b79b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:34.002441Z"}, {"uuid": "267d1649-48e6-4566-98ea-6811052fb429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:34.229047Z"}, {"uuid": "ec3c05b6-5dff-4f6d-9fd0-b94864c728ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:34.802008Z"}, {"uuid": "cf82fdea-e819-424a-98c1-4b22683b421e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:35.550137Z"}, {"uuid": "6f737182-e183-4ca1-88d5-8eb9c06de322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:35.704923Z"}, {"uuid": "1a1a375d-1d93-4eff-b641-79f8a898c008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:35.855513Z"}, {"uuid": "71b4d009-99c9-43ad-aa90-f6b92ea25d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:37.805691Z"}, {"uuid": "1fd0a79e-b91f-441a-be6a-f3ee4c70025e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:38.019892Z"}, {"uuid": "521e9b56-b7f5-42ef-b0b7-bac41992c1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:40.685784Z"}, {"uuid": "eca896e4-d40f-41dd-9b35-326704569cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:41.121761Z"}, {"uuid": "5d690460-90f9-4d94-99ee-e331e175314b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:41.995031Z"}, {"uuid": "0f77b425-7c76-4037-b417-8bdd61c81311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:42.437546Z"}, {"uuid": "d97a686c-567a-43ca-ae07-b6b500d6f46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:43.719216Z"}, {"uuid": "c8ababe3-70d0-4d52-aace-58df98f1d076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:40.099458Z"}, {"uuid": "718eb714-1b0f-4a70-b45e-7cfec9a2ddef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:40.347423Z"}, {"uuid": "c674cbce-b5cd-4669-9bad-103c5ac7adeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:48.039347Z"}, {"uuid": "e10f3120-88fd-4b30-9dcd-2e1bc58f02bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:48.260796Z"}, {"uuid": "9a57bce2-fb00-48fc-9a6a-8c6834673cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:41.558503Z"}, {"uuid": "70072832-7c47-4dd8-8bdc-0ab984320a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:59.577481Z"}, {"uuid": "26086b3c-3f89-4218-8d52-f0c7bbf88336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:00.073286Z"}, {"uuid": "97f05284-aa5c-4499-a5d4-617925b3f83e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:00.410603Z"}, {"uuid": "8c7993d7-1cdd-466b-93fa-1b1e5feed186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:51.334966Z"}, {"uuid": "857a39df-382b-47a6-a8b4-173c4be23d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:53.327278Z"}, {"uuid": "1485282b-a6ea-40ad-a1bb-4d057e0a3073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:46.904103Z"}, {"uuid": "b1281d9e-d72e-4321-bdf9-9e27626889c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:53.158898Z"}, {"uuid": "7fba7496-d577-4406-8d50-32c304896915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:53.651885Z"}, {"uuid": "4c4dcab7-ce43-4817-9cf3-16549c057a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:57.409934Z"}, {"uuid": "d6e65b35-2fb9-4cde-80c7-0dbf1db5565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:02.941503Z"}, {"uuid": "df66d637-41aa-4281-ab46-19c4d18528e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:48.501947Z"}, {"uuid": "d34571e3-cc83-4af0-a1ac-710569106bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:57.914171Z"}, {"uuid": "827a1f21-c1b2-47c3-b3ef-f29131e32235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:58.391442Z"}, {"uuid": "805b4f76-e360-4767-9010-72eb98087d99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:59.069877Z"}, {"uuid": "d84fb861-b520-4ae7-888a-a09da1b3b11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.773598Z"}, {"uuid": "a3a53f7f-7cef-483d-a46b-c057e2239385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.282764Z"}, {"uuid": "d68cd24d-ed6f-40c2-b5e0-d35d8708af01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.448348Z"}, {"uuid": "d8132fda-5f90-4fad-b08e-ced221dafaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.609329Z"}, {"uuid": "786a7b61-8d5e-404d-bcf5-fafd07444532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.995872Z"}, {"uuid": "6465ee31-74fd-4554-abf8-c4ea580a5c04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:02.218810Z"}, {"uuid": "ee9475bd-c073-47c5-bfcf-614d010dd292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:04.687045Z"}, {"uuid": "59a5b922-3f69-4ef4-9d54-83da7468e769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.604867Z"}, {"uuid": "294ea9fa-c93a-40ec-98ac-a6b5ff494525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:04.217738Z"}, {"uuid": "57ca5c68-c0fc-44a2-9476-9c3b5c92e817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:04.485661Z"}, {"uuid": "73382e07-1e3a-436d-96ff-655d9d224c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:06.704925Z"}, {"uuid": "9b8af811-d4f3-4750-9680-d905f6d5a294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:10.973566Z"}, {"uuid": "11c55888-fb64-4a8c-ab73-99242841a721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:14.696081Z"}, {"uuid": "ddea6778-5d4c-4229-955c-e392784e2987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:14.767060Z"}, {"uuid": "543a96bc-3802-45da-a8d8-b61dbabe860c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:11.044202Z"}, {"uuid": "4b17dc45-dac6-49be-b423-38b64ab3f08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:10.412950Z"}, {"uuid": "62c05796-e9dc-4444-b069-5a29a9adb036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:11.116814Z"}, {"uuid": "27c09ecc-9471-4cf0-a9e5-a3f31728a2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:12.643698Z"}, {"uuid": "5f9b16f6-f909-4c69-9815-9a6aa4e6bda7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:12.702129Z"}, {"uuid": "5f38e464-d0c2-4085-b9e4-830f52e4e6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6204", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-pr3g-phhr-h8fh", "content": "", "creation_timestamp": "2026-03-26T18:04:01.000000Z"}, {"uuid": "59f9c0d0-fdd3-4711-b63f-1ecb43829707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:13.557191Z"}, {"uuid": "5ea11419-fda1-423f-b2b7-9ec565abfcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:13.617263Z"}, {"uuid": "fd974e7d-59fd-44b2-8613-0468e0fa681f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.321736Z"}, {"uuid": "e5cff08e-2159-4ce6-b6c2-5b9c2b7ee06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.762515Z"}, {"uuid": "8a625ca9-419d-4c53-a503-24ea21f0e78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.833516Z"}, {"uuid": "dc4f307c-a4de-4be3-bfd9-3cbc052636aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.906791Z"}, {"uuid": "a257d3fd-846a-4bd2-b943-1671ff7c5626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.978548Z"}, {"uuid": "26e2dc91-d713-44b9-a41d-80133e4aa7a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.067223Z"}, {"uuid": "59f4e893-0797-4a8b-9c36-90d8be5aa7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.471878Z"}, {"uuid": "344546a4-341b-454a-a80a-42a3118db0ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.550769Z"}, {"uuid": "7096370d-94dc-4a81-8d02-45aaecc68ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.621366Z"}, {"uuid": "7dc96b75-a0e7-4a50-960b-9da8883ceaf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:13.941831Z"}, {"uuid": "4c00d17d-31a2-4605-b3c0-91fd1a2c00ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:13.874706Z"}, {"uuid": "97111f38-2a3f-4593-ba61-c81bf771f95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.004232Z"}, {"uuid": "79d69a22-dcfa-48ab-87b2-9b103c9fe2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.078897Z"}, {"uuid": "d4ed4980-951b-48da-9da1-b15304ad1892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.551948Z"}, {"uuid": "3425c217-00b1-49cc-9beb-e95195ddbdc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.322285Z"}, {"uuid": "bbb4bbb1-f404-4ef8-b0b9-672ac0e25664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.902164Z"}, {"uuid": "13c2793b-bd3e-4419-b8a2-7e709e1649b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.107899Z"}, {"uuid": "df6f505f-4975-4073-85f5-1d2a437197bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.359678Z"}, {"uuid": "31457616-35d1-4a36-aafe-75354aface72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.907227Z"}, {"uuid": "42ef80eb-4856-4ee5-a23d-f463cc264a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.044235Z"}, {"uuid": "d79c8183-c737-4f79-adf9-79654c1cdb80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.110167Z"}, {"uuid": "0733635e-9a54-4b3f-ad6c-788d3604fcf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.175216Z"}, {"uuid": "9c41ddaf-bb80-4f23-9a87-c851fbfd23f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.670301Z"}, {"uuid": "2a0e3562-4b74-4f9c-86a4-b31d4360dea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.137775Z"}, {"uuid": "9a4410b6-4897-41a6-847a-b359e7789232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Developer Tools.  Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide broncodebestand te importeren en verwerken.\n\n```\nVisual Studio Code CoPilot Chat Extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65675 | 7.10 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell Core: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58612 | 7.40 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70337 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nGitHub Copilot and Visual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70335 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-58650 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-59113 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-47285 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-69320 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-69278 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-69306 | 8.20 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-70336 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\n.NET Framework: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62897 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62872 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65810 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft PowerShell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------| \n| CVE-2026-59119 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70338 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n.NET: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62899 | 5.90 | Omzeilen van beveiligingsmaatregel  | \n| CVE-2026-62900 | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62901 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62902 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62909 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-58641 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62871 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62886 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70354 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nVisual Studio Code - Python extension: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54981 | 7.80 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T01:02:14.260724Z"}, {"uuid": "d085f1ef-bb23-457a-ae44-957694d68960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.237142Z"}, {"uuid": "e500e9e8-6383-4268-90f5-7b25449721fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.375098Z"}, {"uuid": "d22dd133-85ab-4eb7-836d-fa37afbc23ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.613798Z"}, {"uuid": "8c709925-1598-40d2-8423-8eb33e8ef36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:17.054677Z"}, {"uuid": "c87fcd80-b925-4d78-8604-929d463b6ad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.837856Z"}, {"uuid": "5a5fda4f-b3be-487e-a538-734e3859ded2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.938270Z"}, {"uuid": "ac9ff6c0-48ab-4dd7-ba22-1bea2733e676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.133279Z"}, {"uuid": "f935adf3-10af-43b1-a07e-6458f124fa9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.205297Z"}, {"uuid": "baf08281-ef95-470b-aaef-f4e4c09fc5db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.798178Z"}, {"uuid": "62b371bb-984f-463b-8bb5-06ff3291dab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.435769Z"}, {"uuid": "218496c9-cd53-4ad3-856f-bfb843fd3b9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:14.839360Z"}, {"uuid": "e3629e67-384e-445e-8f4f-5291ffc9ed3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:18.694848Z"}, {"uuid": "85671c28-b3ce-4e76-95b7-50213bde44ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.001876Z"}, {"uuid": "26b67595-22b2-440a-9038-0e27a2da7129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.205288Z"}, {"uuid": "71ae03ac-b7d2-4e62-b125-00551f59e6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.288134Z"}, {"uuid": "7dab3322-27d8-4ae7-ad08-08437a523e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.366271Z"}, {"uuid": "eb662853-7e2e-410d-82c1-3bd34d2f016d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.440301Z"}, {"uuid": "d48752d8-4210-444f-af54-da5aef44a593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.512341Z"}, {"uuid": "d18d77d9-7c1a-4f5d-8413-766ca70ded54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.718024Z"}, {"uuid": "f850ed6d-895d-46de-bb18-db64221a6f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.698616Z"}, {"uuid": "79b21e49-e17a-48bb-b2b9-1cad8838e5c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.652918Z"}, {"uuid": "2f99ccb1-a7f5-4e8d-9f42-65c25b283e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.720822Z"}, {"uuid": "b3a9cd11-3581-45ad-b896-df0c74a729f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.452263Z"}, {"uuid": "302f7c39-bc75-4c9f-b887-5a3f1cf623f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.530513Z"}, {"uuid": "b3cf3742-78df-4626-85c8-fd9df010e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.829547Z"}, {"uuid": "939221ac-1743-4dd0-b037-e142baa653cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:15.900884Z"}, {"uuid": "97610cef-de78-48cc-a3a0-3dee4131d7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:20.965672Z"}, {"uuid": "6be99c4f-0069-48f7-ac5e-dd5acca9f881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.043515Z"}, {"uuid": "9e17bdd9-c579-4a49-9fd3-0d5592817770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.182441Z"}, {"uuid": "031d50ea-54fd-4126-ab35-93ee90ce542e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.325947Z"}, {"uuid": "77bd4b68-fc0d-4a6e-a3cd-aa78f5f241df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.392460Z"}, {"uuid": "4f5978bc-9691-4151-adb0-52fe88e2304d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.462248Z"}, {"uuid": "196bb36a-9c8b-4ca2-ac14-66ac52b97b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.675898Z"}, {"uuid": "529a017f-88e4-447f-9f41-44edebaeeb0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:21.746774Z"}, {"uuid": "1b02eceb-a3c7-4187-b62b-2835bde826d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.418189Z"}, {"uuid": "225674c1-96de-402c-9079-6e92ab1d9dbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.772424Z"}, {"uuid": "b8713ff2-f707-4f96-b609-84f2c68657ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.699667Z"}, {"uuid": "2a01d3f0-c3fc-4cb8-9ab2-c56420bb95d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.071790Z"}, {"uuid": "e071bb91-59fa-4031-8d1d-a4481775e440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.357502Z"}, {"uuid": "e8e80f70-8071-4839-9e70-d222b7da3c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.435254Z"}, {"uuid": "a291f0a8-dd5e-4e04-b99a-b683871b150a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes/", "content": "Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.\n\n\nImage: Shutterstock, Mallika Home Studio.\n\nAugust’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes. Microsoft has attributed the recent patch deluge to vulnerability discoveries aided by artificial intelligence, and experts roundly agree that Windows users should get used to the idea of Patch Tuesdays (the second Tuesday of each month) covering hundreds of newly discovered security flaws.\n\nFully 42 of the 398 flaws that Microsoft patched today earned Redmond’s most-dire “critical” rating, meaning they are severe enough that malware or malcontents could exploit them to gain remote control over a Windows computer with little to no help from the user.\n\nThe sole known “zero day” bug fixed by Microsoft this month is CVE-2026-68820, a privilege escalation weakness in a core Windows component called afd.sys, which the security firm Automox describes as “the driver behind Windows socket connections on effectively every endpoint.”\n\n“This isn’t a front-door bug,” Automox’s Landon Miles wrote in a Patch Tuesday blog post. “It’s step two in a chain: an attacker phishes their way into a low-privilege foothold, then uses the driver flaw to take the box. The 7.0 score reflects the high attack complexity, because race conditions are fiddly. The exploit has to be thrown over and over until the timing lands. Someone is clearly landing it anyway.”\n\nCVE-2026-62832 is another privilege escalation flaw that Microsoft has labeled likely to be exploited; this flaw, in the Windows User Profile Service, may be related to the recent “LegacyHive” public disclosure from the prolific bug hunter known as Nightmare Eclipse. The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.\n\nOther major software makers are likewise increasing their patch volumes and cadence thanks to AI, including Adobe which last month moved to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month. Cisco, Google, Mozilla and Oracle also are shipping updates far more frequently and abundantly.\n\nBy all accounts, AI is quite good at finding security holes in software. But for now at least, patching the resulting bugpocalypse remains a heavily human-centric endeavor, and the jury is still out on whether AI technologies will turn out to be as good at fixing vulnerabilities as they are at finding and exploiting them. This is an important question when one considers that these same AI technologies also are suggesting fixes for the vulnerabilities they find.\n\nResearchers at 1Password recently examined what happens when different large language models (LLMs) generate vulnerability patches for newly disclosed, complex vulnerabilities. They found the LLMs produced patches that failed to fix the flaw or added a new weakness in the process (or both) more than half the time.\n\nEd Skoudis, president of the SANS Technology Institute, said his team has seen excellent results using AI to generate patches, provided there are humans in the loop to test the suggested fixes and push for iterative improvements.\n\n“AI is rapidly becoming astonishingly good at finding vulnerabilities, but this research shows that fixing them is a very different problem,” Skoudis wrote in a SANS newsletter today. “Don’t expect one-shot AI patching to work reliably. Instead, iterate, test, challenge, improve, and verify. AI can be an extraordinary patching partner, but today it still needs a skilled human at the keyboard.”\n\nTyler Reguly at Fortra says while reports of Microsoft patching hundreds of vulnerabilities in one go has some organizations struggling to patch faster, it’s important to bear in mind that only one of the almost 400 bugs addressed today is known to be actively exploited. Reguly suggested security leaders check in with their teams to see how they’re handling the increasing workloads, which often involve testing fixes before deploying them in production environments.\n\n“If you’re a chief security officer talk to your teams about how they are shifting or modifying their workflows to better accommodate the patching shift that we’re seeing and support them across various organizational units by enabling the changes they want to see made,” Reguly said. “There\u2019s no need to rush these updates, no matter what various vendors and organizations try to tell you. You need to make sure that you are rolling out safe updates that will not negatively impact your systems.”\n\nSpeaking of the humans behind the keyboards, don’t neglect to backup your system and/or data before applying this month’s monster patch load. The day after each month’s Patch Tuesday is sometimes derisively referred to as Reboot Wednesday, but it generally doesn’t hurt to wait a few days to apply these huge update bundles because it sometimes takes a couple of days for the occasional misbehaving patch to get ironed out properly by Microsoft.\n\nFor a clickable, per-patch breakdown by severity and urgency, check out this roundup from the SANS Internet Storm Center.", "creation_timestamp": "2026-08-12T01:02:31.971420Z"}, {"uuid": "b323c341-7608-48e8-8580-7477ab4f47e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.111663Z"}, {"uuid": "e8497737-33bb-47da-91dd-5223fad5b498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.338575Z"}, {"uuid": "e2dfbb49-5bdb-4af9-b052-125bd92bd311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.408539Z"}, {"uuid": "05851e45-3a79-4893-adf9-2f092410f38b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.479699Z"}, {"uuid": "ff47e512-9311-4faf-a6f8-147484eb8653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:16.621264Z"}, {"uuid": "461f675f-0d70-4508-b1e2-8d9c6ddb14e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:17.691408Z"}, {"uuid": "f27c05d1-7952-43fd-9b34-e9e7d06c6046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:17.756892Z"}, {"uuid": "94562dbd-081e-47f7-bd0d-aa215755e5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:17.957822Z"}, {"uuid": "e0beb254-c5cd-407b-bf63-d2a47c497114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:19.795383Z"}, {"uuid": "81628a4f-bea4-4168-9ca7-4ddd141b9d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:22.278550Z"}, {"uuid": "2f4f0223-29ae-4c9d-92bf-4c7194577a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:23.751955Z"}, {"uuid": "72f9c9df-8661-4f2a-8066-70cddcb1e4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.192869Z"}, {"uuid": "79e2ccec-341d-4c5a-8cd0-0b89438df3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.260331Z"}, {"uuid": "68a7289f-a3e4-40f5-a7bb-077267db9139", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.329950Z"}, {"uuid": "8f28492c-cb81-4ab7-9fb2-2e75732959b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.290597Z"}, {"uuid": "bfd6a22d-2c7b-4ddd-bfe1-5c1301363100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.555468Z"}, {"uuid": "e3acef1f-5449-4924-9168-d38a996772d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.627146Z"}, {"uuid": "c03338ec-81df-4117-ac09-f3f440b70e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.738764Z"}, {"uuid": "d88d8daa-d7f6-4c58-b4d0-f37bf7cd2247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.042937Z"}, {"uuid": "c447e430-77b0-48d6-bd6b-83af713f3564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.113366Z"}, {"uuid": "c1de844f-2b83-4d91-a866-e0833c54d8bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.488212Z"}, {"uuid": "7dc9c5ba-0b78-428e-a602-eac1c367cd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:24.560933Z"}, {"uuid": "c039bd3d-3993-4747-9567-7a467337ae55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:25.268316Z"}, {"uuid": "29d2763b-f263-4320-bfb7-57c4997ed326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.911930Z"}, {"uuid": "319aeeaf-ca34-462a-af19-67768b65426a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.473671Z"}, {"uuid": "fe939d5f-9b39-434c-9975-d171a3554851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.547968Z"}, {"uuid": "3e037acc-63a2-4e8e-ba89-d97e8787d029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.620114Z"}, {"uuid": "5dbc0cef-fab2-4d45-bc47-4fc376560184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.850301Z"}, {"uuid": "a41da722-14e0-4dcf-8721-6773eaa305c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.993191Z"}, {"uuid": "7cc2f26e-fe0a-4c4e-aa98-a42358c9942f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:28.145243Z"}, {"uuid": "9cd2600c-220b-45c5-aa53-b63245e20853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:28.304507Z"}, {"uuid": "2694a047-aaf5-4cdd-9b22-bb6018a906b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.259516Z"}, {"uuid": "be547e12-a8cb-4016-a427-9a767dc9ca10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.442660Z"}, {"uuid": "f734d20c-b38c-4604-a150-00745dbf01a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.512237Z"}, {"uuid": "49d8d847-1e71-4848-ba62-afa3d269878b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.567333Z"}, {"uuid": "fae24382-39e3-4084-96a4-6f1904ed1289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:25.773454Z"}, {"uuid": "f8f872cc-0c28-45f2-be8c-4f58d0258ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.117205Z"}, {"uuid": "3b911d14-24be-4dd4-b54c-3874cce9ffc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.186029Z"}, {"uuid": "9028652b-bcea-43f2-9d65-36d659bcb2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.713053Z"}, {"uuid": "8cc031f8-7e50-49e5-b5d8-a6c1dacdd9fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.781660Z"}, {"uuid": "2cdbc50c-2ff4-4a45-8313-294621670f2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:26.845700Z"}, {"uuid": "005c0c1c-a1c2-4f2a-a7c1-6161194b2f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.396043Z"}, {"uuid": "4b720081-f437-4038-85df-2d79f2a885c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.696795Z"}, {"uuid": "ca280b11-cc54-45f5-9e1c-24dbe8f03177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:27.926984Z"}, {"uuid": "f8d549e9-7912-4c07-8d77-ad057ac00b0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.099884Z"}, {"uuid": "384541f4-949a-4f97-aa5b-f10521d8849d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.698880Z"}, {"uuid": "55aa8b87-07cf-42d3-8fff-bf7ff3b28089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.771302Z"}, {"uuid": "3d4a09de-e680-4040-aaaf-4e2169421b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.845869Z"}, {"uuid": "5b69848c-1e45-4d1f-9205-c9ef3f4a41ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.988865Z"}, {"uuid": "647da6ce-8aa4-42ff-9972-51bdee47bff8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.078098Z"}, {"uuid": "0f90d612-b8a4-41d3-b8fb-2a6d562bf39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.149768Z"}, {"uuid": "b3b7323b-d259-44b6-a9b5-ed537a1b65b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.145689Z"}, {"uuid": "d533e7c3-d327-4bca-93a6-55999f04ee25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:31.218628Z"}, {"uuid": "35429718-4db2-49dc-947d-d094f251da6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:25.705932Z"}, {"uuid": "7358cff4-922a-4009-94dd-fec771fef277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:29.501643Z"}, {"uuid": "504cdb46-57eb-45db-b8b2-b8b3db1c0091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:28.377525Z"}, {"uuid": "6910d43c-edde-45b8-a8ae-a438efe98079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msjat6atbm2o", "content": "CVE-2026-62836 - azure sql managed instance\nAn attacker can exploit a security weakness in Azure SQL Managed Instance, allowing them to gain elevated network privileges without permission. This could let the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-07T19:06:06.514645Z"}, {"uuid": "725e4586-5868-4d2c-a69b-562f6cc021af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.304010Z"}, {"uuid": "79c4e54b-c9ab-4fe2-a253-2eaf5b990d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.628260Z"}, {"uuid": "b32a633f-c4f1-4ee4-818f-dbb78ad30959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.781456Z"}, {"uuid": "efa0955b-b404-421f-9157-b3b38c4e8310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.857104Z"}, {"uuid": "bf1d98e6-cd2a-4263-ac8d-a9ac4359afeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.927936Z"}, {"uuid": "9cb2c942-5b28-4e49-8239-8d12ad2e3dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "Microsoft heeft een groot aantal kwetsbaarheden verholpen in Windows. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe ernstigste kwetsbaarheden hebben kenmerken **CVE-2026-59124, CVE-2026-62815, CVE-2026-62878, CVE-2026-62893** en **CVE-2026-65791** toegewezen gekregen en bevinden zich in respectievelijk Telephony Service, QUIC, DNS Server, Capability Access Management Service en iSCSI Target Service. Kwaadwillenden met toegang tot deze services kunnen zonder voorafgaande authenticatie mogelijk code uitvoeren of zich toegang verschaffen tot het kwetsbare systeem.\n\nNaast deze ernstige kwetsbaarheden zijn nog eens meer dan 230 kwetsbaarheden verholpen, allen varierend in ernstigheid van middelmatig tot hoog/kritiek.\n\nDoor de aard en omvang van deze updates, adviseert het NCSC om deze updates met voorrang in te zetten.\n\n```\nWindows Accessibility Infrastructure (ATBroker.exe): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61358 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54113 | 7.50 | Denial-of-Service                   | \n| CVE-2026-61930 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62737 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61929 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62708 | 6.40 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62749 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62788 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65773 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hello: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61928 | 5.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Schannel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62779 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62757 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nAMD Zen: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59130 | 5.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59131 | 5.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Secure Socket Tunneling Protocol (SSTP): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62889 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65671 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65672 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Win32K: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62712 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62746 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62798 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62876 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62877 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65678 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62711 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62733 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62743 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62786 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62885 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65775 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65776 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Autopilot: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65783 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65779 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65780 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65778 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65782 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65781 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Routing and Remote Access Service (RRAS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62819 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Common Log File System Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62728 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Desktop Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61356 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61367 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62692 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61364 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61365 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft QUIC: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62815 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Installer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59127 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61925 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70344 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70345 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70346 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70347 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61938 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62768 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65774 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network Address Translation (NAT): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56179 | 8.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows Storage Port Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65814 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows NTFS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61350 | 4.60 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62796 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62797 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65784 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62700 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62793 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62880 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62887 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nUser-Mode Power Service (UMPS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62721 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Bind Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61927 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61934 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62705 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62722 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nVirtual Hard Disk (VHD) Miniport Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59125 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Narrator Braille: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56174 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Remote Registry Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59138 | 6.50 | Denial-of-Service                   | \n| CVE-2026-61345 | 6.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Key Guard: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66799 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows RPC API: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-42976 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows User Profile Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62832 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Telephony Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61353 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62723 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62724 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62748 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62729 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-59122 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62701 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62725 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62726 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62732 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62734 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nCapability Access Management Service (camsvc): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62892 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Imaging Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-54984 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62740 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Message Queuing: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62719 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62717 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65790 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Defender Firewall Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61936 | 5.50 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nRPC Runtime: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62781 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Program Compatibility Assistant Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62696 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49179 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65777 | 5.30 | Omzeilen van beveiligingsmaatregel  | \n|----------------|------|-------------------------------------|\n\nWindows Shell: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62770 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LUAFV: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50472 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows TCP/IP: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59132 | 7.50 | Denial-of-Service                   | \n| CVE-2026-62792 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Device Association Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62747 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62710 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Storage: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62695 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61359 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows GDI: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65662 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61360 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Kerberos: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62754 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62766 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62773 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62752 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cross Device Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66804 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Deployment Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62893 | 9.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows GDI+: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62890 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62709 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62822 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows iSCSI Target Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65681 | 7.50 | Denial-of-Service                   | \n| CVE-2026-65679 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-65791 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65796 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows Encrypting File System (EFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59128 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nApplication Information Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61357 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Container Isolation FS Filter Driver (unionfs.sys): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62772 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62775 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Local Security Authority Server (lsasrv): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62784 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows TPM: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-6727  | 5.90 | Toegang tot gevoelige gegevens      | \n| CVE-2026-6726  | 7.90 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nWindows USB Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61926 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Projected File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62751 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows LDAP - Lightweight Directory Access Protocol: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62785 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62795 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Universal Disk Format File System Driver (UDFS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62699 | 6.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Backup Engine: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62908 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Cloud Files Mini Filter Driver: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62713 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62771 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Management Instrumentation: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62738 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Attestation service and Device Health Attestation Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-66802 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-71331 | 8.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Push Notifications: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62690 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nRemote Desktop Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59134 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61924 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61352 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61363 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-61918 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61921 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62824 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft High Performance Computing (HPC) Pack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59124 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-59133 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Windows Search Component: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59135 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nDesktop Window Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65786 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65787 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65788 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62799 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62782 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-65794 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DNS: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62787 | 7.50 | Uitvoeren van willekeurige code     | \n| CVE-2026-62817 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62820 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-62878 | 9.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65789 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-70304 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70330 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61920 | 6.60 | Uitvoeren van willekeurige code     | \n| CVE-2026-62769 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62778 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62881 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62883 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65795 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65797 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65799 | 6.70 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65798 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Network File System: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68819 | 5.90 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP.sys: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61937 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62753 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62735 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62739 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62741 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62811 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Display Enhancement Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61923 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows SMB Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62800 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62790 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nReliable Multicast Transport Driver (RMCAST): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62816 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows Management Services: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70348 | 5.50 | Denial-of-Service                   | \n|----------------|------|-------------------------------------|\n\nWindows HTTP Protocol Stack: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62750 | 6.50 | Manipulatie van gegevens            | \n|----------------|------|-------------------------------------|\n\nWindows Graphics Kernel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61346 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62702 | 6.80 | Denial-of-Service                   | \n| CVE-2026-62774 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Event Logging Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59137 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-61347 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-59126 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Sensor Data Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61355 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWinlogon: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61939 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Work Folder Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61349 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Ancillary Function Driver for WinSock: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61348 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-68820 | 7.00 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70307 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Modern Device Management (MDM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62707 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft COM for Windows: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59136 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows Network Connection Broker: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61366 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows License Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62777 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Wired AutoConfig Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62730 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nWindows DWM Core Library: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61932 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-61933 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62703 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62894 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62888 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Hyper-V: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61368 | 5.00 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Digest Authentication: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62698 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows MIDI Service Module: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62688 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62693 | 7.00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Client: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-61361 | 7.00 | Uitvoeren van willekeurige code     | \n| CVE-2026-62755 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65785 | 6.50 | Denial-of-Service                   | \n| CVE-2026-62736 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nWindows Remote Access Connection Manager: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62783 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62758 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nActive Directory Certificate Services (AD CS): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62818 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nWindows DHCP Server: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62718 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62715 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62716 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62742 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62745 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62812 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62720 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62714 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62761 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62776 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62803 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62807 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62814 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62823 | 8.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n```", "creation_timestamp": "2026-08-12T01:02:30.997116Z"}, {"uuid": "bc6664b7-a5da-43d4-abc5-3c9c5fb0feef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://gist.github.com/alon710/ab5adbb774ee3c6232d5f9c5daa911a0", "content": "# CVE-2026-62901: CVE-2026-62901: Remote Denial of Service via Infinite Loop in .NET WebSockets Engine\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62901\n\n## Summary\nCVE-2026-62901 is a high-severity Denial of Service (DoS) vulnerability in the Microsoft .NET ecosystem, specifically affecting the System.Net.WebSockets frame-processing engine and associated network transports. Under certain circumstances, a remote, unauthenticated attacker can exploit this vulnerability by sending malformed or specifically crafted WebSocket packets over the network, causing a targeted .NET application server to enter a tight infinite loop. This behavior results in 100% CPU utilization on the executing thread, starving application resources and leading to a complete Denial of Service.\n\n## TL;DR\nA remote, unauthenticated attacker can trigger an infinite loop and 100% CPU exhaustion in .NET servers by sending a malformed WebSocket frame header followed by an immediate connection termination.\n\n## Technical Details\n\n- **CWE ID**: CWE-606: Unchecked Input for Loop Condition\n- **Attack Vector**: Network\n- **CVSS v3.1**: 7.5 (High)\n- **Impact**: Denial of Service (DoS) via 100% CPU Exhaustion\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- .NET 10.0 runtime\n- .NET 9.0 runtime\n- .NET 8.0 runtime\n- Visual Studio 2022\n- Visual Studio 2026\n- **.NET 10.0**: >= 10.0.0, < 10.0.11 (Fixed in: `10.0.11`)\n- **.NET 9.0**: >= 9.0.0, < 9.0.19 (Fixed in: `9.0.19`)\n- **.NET 8.0**: >= 8.0.0, < 8.0.30 (Fixed in: `8.0.30`)\n- **Visual Studio 2022**: >= 17.14.0, < 17.14.38 (Fixed in: `17.14.38`)\n- **Visual Studio 2026**: >= 18.0, < 18.8.3 (Fixed in: `18.8.3`)\n\n## Mitigation\n\n- Upgrade .NET Runtime and SDK to patched versions\n- Configure reverse proxy rate limits for WebSocket connections\n- Implement aggressive connection timeouts on proxy/WAF layers\n\n**Remediation Steps:**\n1. Identify all hosts running .NET 8.0, 9.0, or 10.0 runtime environments.\n2. Apply the latest servicing updates: 8.0.30, 9.0.19, or 10.0.11.\n3. Update Visual Studio installations to 17.14.38 (VS 2022) or 18.8.3 (VS 2026).\n4. Recompile self-contained deployments with the updated SDK to bundle the secure native MsQuic library (2.5.9).\n5. Deploy monitoring rules to observe thread pool starvation and abnormal CPU usage on .NET web servers.\n\n## References\n\n- [Microsoft Security Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62901)\n- [CVE-2026-62901 CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-62901)\n- [Dotnet Runtime Fix Commit 1](https://github.com/dotnet/runtime/commit/18c88378c1c70a0b3a2c69d783f89b8a8ea0143e)\n- [Dotnet Runtime Fix Commit 2](https://github.com/dotnet/runtime/commit/6d9e1b3058c87cb4ba51e2b5f160e098819a5ad2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62901) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T01:31:15.352140Z"}, {"uuid": "4ad69a85-08af-41d2-a6a2-d47c88cff02b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmh3r4ykm22", "content": "\ud83d\udd34 CVE-2026-62674 - Critical (9)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62674/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T19:01:28.351772Z"}, {"uuid": "96c6bbf5-5add-4623-a09b-b4a85c86a78b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtgsebtksi2y", "content": "\ud83d\udccc CVE-2026-62817 - Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-62817", "creation_timestamp": "2026-08-19T13:07:06.569905Z"}, {"uuid": "3bbfdd32-0151-438c-9c58-b9e0068d8e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmi52tp4f2p", "content": "CVE-2026-62867 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:20:04.890301Z"}, {"uuid": "c774bedc-e488-4220-8c50-c53e79b9a97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmiox4odb24", "content": "CVE-2026-62940 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:30:05.386904Z"}, {"uuid": "6e9cf5c4-4813-4442-9dc9-2501558e3079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmioyjyjj24", "content": "CVE-2026-62941 - incus\nA security issue affects incus (Debian). The advisory does not describe the issue in detail. Check the linked advisory for the fixed version and details.\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #debian #Debian13 #CVE #infosec", "creation_timestamp": "2026-08-21T19:30:06.627629Z"}, {"uuid": "cb968fe8-f200-42ee-811c-3d4e34ff4c11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62234", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtijttg3sm2p", "content": "CVE-2026-62234 - grav\nGrav webhooks before version 2.0.4 allow authorized users to access local files and potentially sensitive information. This can happen when a malicious user creates a webhook with a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-20T05:40:03.940417Z"}, {"uuid": "014d8518-d7fe-43fc-89d6-0f140832ddd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://gist.github.com/alon710/ee3d380af55d943c49a24084c4a98242", "content": "# CVE-2026-62899: CVE-2026-62899: .NET Security Feature Bypass Vulnerability (HTTP Request Smuggling)\n\n> **CVSS Score:** 5.9\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62899\n\n## Summary\nCVE-2026-62899 is a security feature bypass vulnerability in the Microsoft .NET runtime environment on non-Windows platforms. The flaw manifests as an HTTP Request/Response Smuggling vulnerability (CWE-444) within the managed implementation of the System.Net.HttpListener class. This allows unauthenticated remote attackers to desynchronize request boundaries when the backend .NET application is hosted behind an upstream reverse proxy.\n\n## TL;DR\nA medium-severity HTTP request smuggling vulnerability in .NET on Linux and macOS allows unauthenticated remote attackers to bypass frontend security policies, hijack active user sessions, and cause cache desynchronization.\n\n## Technical Details\n\n- **CWE ID**: CWE-444\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: High (AC:H)\n- **CVSS Base Score**: 5.9 (Medium)\n- **Exploit Status**: No active public exploits\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- .NET Runtime on Linux\n- .NET Runtime on macOS\n- .NET Runtime on WebAssembly\n- **Microsoft .NET 10.0**: >= 10.0.0, < 10.0.11 (Fixed in: `10.0.11`)\n- **Microsoft .NET 9.0**: >= 9.0.0, < 9.0.19 (Fixed in: `9.0.19`)\n- **Microsoft .NET 8.0**: >= 8.0.0, < 8.0.30 (Fixed in: `8.0.30`)\n- **Microsoft Visual Studio 2022 (version 17.14)**: >= 17.14.0, < 17.14.38 (Fixed in: `17.14.38`)\n- **Microsoft Visual Studio 2026 (version 18.8)**: >= 18.0, < 18.8.3 (Fixed in: `18.8.3`)\n\n## Mitigation\n\n- Upgrade the .NET runtime and SDK to secure servicing releases.\n- Configure upstream reverse proxies to strictly normalize HTTP headers.\n- Disable connection keep-alives to prevent boundary exploitation.\n\n**Remediation Steps:**\n1. Identify all Linux and macOS servers running .NET 8.0, 9.0, or 10.0.\n2. Install .NET 10.0.11, 9.0.19, or 8.0.30 or newer.\n3. Update development environments to Visual Studio 2022 (version 17.14.38) or Visual Studio 2026 (version 18.8.3).\n4. Verify reverse proxy configurations to ensure strict header RFC compliance.\n\n## References\n\n- [Microsoft Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62899)\n- [NVD - CVE-2026-62899](https://nvd.nist.gov/vuln/detail/CVE-2026-62899)\n- [dotnet/runtime Commit 18c88378](https://github.com/dotnet/runtime/commit/18c88378c1c70a0b3a2c69d783f89b8a8ea0143e)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62899) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T02:31:42.864308Z"}, {"uuid": "90905be0-6c07-4ca3-b20e-d875ce0f0561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmjso4lsr2m", "content": "CVE-2026-62233 - grav-plugin-api\nA non-admin user can create a super-admin account and bypass two-factor authentication in the Grav API Plugin. This is fixed in version 1.0.6. Update to the latest version to ensure\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#getgrav #CVE #infosec", "creation_timestamp": "2026-08-21T19:50:03.727119Z"}, {"uuid": "431b914e-e178-4cac-b799-307592d61d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117080333385861824", "content": "A new vulnerability with increased severity was disclosed for Microsoft Windows (CVE-2026-62893) https://vuldb.com/vuln/388612", "creation_timestamp": "2026-08-12T03:08:31.043604Z"}, {"uuid": "bf0275fd-b477-482b-b2f4-fe5217e507ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62574", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtwox6lk2o", "content": "\ud83d\udd17 CVE : CVE-2026-60589, CVE-2026-61308, CVE-2026-62574, CVE-2026-70906, CVE-2026-70907", "creation_timestamp": "2026-08-19T13:35:17.710538Z"}, {"uuid": "99da58e9-82a0-4475-99c3-a16dd0b2f88d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://gist.github.com/alon710/0e53d71b7aead8a8df5c63101e1c6259", "content": "# CVE-2026-62898: CVE-2026-62898: Use After Free Information Disclosure in Microsoft QUIC\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62898\n\n## Summary\nA critical use-after-free vulnerability in Microsoft QUIC allows unauthenticated remote attackers to disclose sensitive system memory over the network. The vulnerability is caused by a race condition during rapid connection termination and asynchronous packet retransmission.\n\n## TL;DR\nUse-after-free in MSQuic leads to high-impact remote information disclosure of server memory.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-416\n- **Attack Vector**: Network\n- **CVSS Score**: 7.5 (High)\n- **EPSS Score**: 0.00%\n- **Exploit Status**: No weaponized exploit available\n- **KEV Status**: Not listed in CISA KEV\n\n## Affected Systems\n\n- .NET 10.0\n- .NET 9.0\n- .NET 8.0\n- Microsoft Visual Studio 2022\n- Microsoft Visual Studio 2026\n- **.NET 10.0**: >= 10.0.0, < 10.0.11 (Fixed in: `10.0.11`)\n- **.NET 9.0**: >= 9.0.0, < 9.0.19 (Fixed in: `9.0.19`)\n- **.NET 8.0**: >= 8.0.0, < 8.0.30 (Fixed in: `8.0.30`)\n- **Microsoft Visual Studio 2022**: >= 17.14.0, < 17.14.38 (Fixed in: `17.14.38`)\n- **Microsoft Visual Studio 2026**: >= 18.0, < 18.8.3 (Fixed in: `18.8.3`)\n\n## Mitigation\n\n- Apply security patches for .NET runtime and Visual Studio immediately.\n- Disable HTTP/3 (QUIC) and fall back to HTTP/2 (TCP) if immediate patching is not possible.\n\n**Remediation Steps:**\n1. Identify systems running vulnerable .NET runtime or Visual Studio versions.\n2. Deploy patched updates (10.0.11, 9.0.19, 8.0.30, etc.) across all development and production environments.\n3. Restart services hosting QUIC configurations to load the new msquic.dll module.\n\n## References\n\n- [Microsoft Security Response Center Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62898)\n- [CVE-2026-62898 Authorization and Record](https://www.cve.org/CVERecord?id=CVE-2026-62898)\n- [Fix Commit in dotnet/runtime](https://github.com/dotnet/runtime/commit/6d9e1b3058c87cb4ba51e2b5f160e098819a5ad2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62898) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T03:31:19.471291Z"}, {"uuid": "1e3d9733-fb0d-41b4-92ca-0a154b3b7014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msuara56y324", "content": "@talosintelligence.com\nMicrosoft's August 2026 update patches 421 vulnerabilities, including 62 critical and one actively exploited EoP flaw (CVE-2026-68820).\n-\nIOCs: CVE-2026-68820, CVE-2026-62893, CVE-2026-62878\n-\n#CVE #PatchTuesday #ThreatIntel", "creation_timestamp": "2026-08-12T04:04:18.322122Z"}, {"uuid": "5b9c9598-19f1-4e0f-a9d5-cfa53d87cb00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3msuara56y324", "content": "@talosintelligence.com\nMicrosoft's August 2026 update patches 421 vulnerabilities, including 62 critical and one actively exploited EoP flaw (CVE-2026-68820).\n-\nIOCs: CVE-2026-68820, CVE-2026-62893, CVE-2026-62878\n-\n#CVE #PatchTuesday #ThreatIntel", "creation_timestamp": "2026-08-12T04:04:18.438919Z"}, {"uuid": "08eed661-c11b-44b2-b7cf-6a59a310a3a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3msuazp4r4f2u", "content": "Microsoft Rates Exploitation 'More Likely' for CVE-2026-62893 in Windows", "creation_timestamp": "2026-08-12T04:09:05.407819Z"}, {"uuid": "6bc1a860-5ad9-4753-99b8-d8ee4fbfca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62477", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muahrx65d224", "content": "\ud83d\udccc CVE-2026-62477 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Security).   The supported version that i... https://www.cyberhub.blog/cves/CVE-2026-62477", "creation_timestamp": "2026-08-29T18:07:07.236747Z"}, {"uuid": "7996ae74-f2d9-417f-b185-d10dc5f0933b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62832", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mszrdpxdei2g", "content": "\ud83d\udcf0 Microsoft Menambal Zero-Day Windows LegacyHive yang Memungkinkan Perolehan Hak Administrator\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/08/14/windows-legacyhive-zero-day-cve-2026-62832/\n\n#cyberAttack #cyberSecurity #cybersecurity #eksploitasi #eskalasiHakAkses #exploit #hack", "creation_timestamp": "2026-08-14T08:44:17.474327Z"}, {"uuid": "a42af158-ec82-4030-a04e-41933068037d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117056917271122111", "content": "We have just added an important vulnerability affecting Microsoft Azure SQL Managed Instance (CVE-2026-62836) https://vuldb.com/vuln/386865", "creation_timestamp": "2026-08-07T23:53:29.469583Z"}, {"uuid": "8c117010-70cd-458c-a7fb-91412cfed036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-monthly-security-update-august-2026", "content": "", "creation_timestamp": "2026-08-12T04:45:30.539341Z"}, {"uuid": "f5a1b59a-c942-4c56-9541-3dd5d7c4567e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msuhmtozrq2x", "content": "\ud83d\udccc CVE-2026-62827 - Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62827", "creation_timestamp": "2026-08-12T06:07:07.026678Z"}, {"uuid": "d772d7ac-cf35-4d2d-8078-862059b4f2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6271", "type": "seen", "source": "Telegram/0GiSZs1mYgE6usTH1T9gS9Io2DYBjx6aLN6oDmWf5dZhrI8", "content": "", "creation_timestamp": "2026-05-26T07:00:13.000000Z"}, {"uuid": "996d8def-cf4b-4680-abc6-f12f195f1baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62675", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsu3qct2m", "content": "\ud83d\udfe0 CVE-2026-62675 - High (8.8)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62675/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:01:45.348196Z"}, {"uuid": "b7b73b00-d2ed-4a03-a1cd-34118e62dee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtoa2pqdfb27", "content": "\ud83d\udd34 CVE-2026-62941 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62941/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T12:00:56.478436Z"}, {"uuid": "d06c3d35-ca83-423a-9626-f433d4a525c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msujlm7cxa2z", "content": "Found a heap overflow vulnerability in Windows SMB that leads to RCE and reported it to MSRC in June. \n\nThe vulnerability has now been addressed with CVE-2026-62800 in the August Patch Tuesday updates.\n\n\nhttps://\u2026\n\n\ud83d\udd01 RT @zeifan | reposted by @cyb3rops\nhttps://x.com/zeifan/status/2087229567656493357", "creation_timestamp": "2026-08-12T06:42:13.140826Z"}, {"uuid": "5174b733-477c-4d57-81c6-3c6049d7dd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62677", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnt2msql2m", "content": "\ud83d\udfe0 CVE-2026-62677 - High (8.8)\n\nOmnigent is an open-source AI agent framework and meta-harness for orchestrating coding agents. P...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62677/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-21T21:01:52.351667Z"}, {"uuid": "c3a87869-c9eb-4800-95d9-a1ec7018b9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T07:02:11.488254Z"}, {"uuid": "4b06ecb2-9768-4bda-889a-eb9f063c3bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvvpnioo32h", "content": "CVE-2026-6226 - Frontend Admin by DynamiApps\nCVE ID : CVE-2026-6226\n \n Published : May 28, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege escalation in versions up to and includ...", "creation_timestamp": "2026-05-28T11:20:43.466330Z"}, {"uuid": "6312f13e-7c5d-4f50-bba2-8dbaf2e073ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6226", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwc2spmm72r", "content": "\ud83d\udfe0 CVE-2026-6226 - High (8.8)\n\nThe Frontend Admin by DynamiApps plugin for WordPress is vulnerable to unauthenticated privilege ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6226/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-28T15:01:43.432554Z"}, {"uuid": "8cbdbeb1-d3ab-4558-a663-5f7702d6f572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T07:02:11.417155Z"}, {"uuid": "00740830-d808-42e4-853f-7593a72817d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-12T07:02:11.807674Z"}, {"uuid": "ef68c7a6-c60b-4d4f-9b57-c1dacf7de62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://t.me/bdufstecru/3393", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-11889\nCVE-2026-62737\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62737", "creation_timestamp": "2026-08-19T16:00:03.714239Z"}, {"uuid": "d83f0103-7968-422e-bc04-d78427a39514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msk5ewdujy23", "content": "\ud83d\udccc CVE-2026-62830 - Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62830", "creation_timestamp": "2026-08-08T03:37:06.775925Z"}, {"uuid": "eab39a9b-dea1-4c3c-8282-485e5c043502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-12T08:00:07.572940Z"}, {"uuid": "5e13c71f-1fd5-4e2d-a042-dd5a64365797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-12T08:00:07.610447Z"}, {"uuid": "6450cac0-0574-4e7b-9231-bfdfaba514ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-12T08:00:07.648094Z"}, {"uuid": "513ab04a-cf26-47f9-b26e-5965ada1abcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-12T08:00:07.687544Z"}, {"uuid": "7ae467cd-f3dd-40ab-bad4-0e3a901663ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/A4IPbzoy9Gw8ShHW02tBtHxzpt5OvMxyEW41ZsBI0fYb4Sg", "content": "", "creation_timestamp": "2026-08-12T08:00:04.427156Z"}, {"uuid": "0c818ed5-6873-4ab3-bdb2-f8730428d27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/HrUEsiplwCxIIQ-iwDufna6JDGGnbWtxWm3ImyTA7HG0KoU", "content": "", "creation_timestamp": "2026-08-12T08:00:04.689527Z"}, {"uuid": "9b3d38fa-abad-4c83-b7b2-808b7f9f015b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/MVfTmsaSHIB0Ey-kxkJ2IT5SDI5JNsfPWKggKUAVISDEBZA", "content": "", "creation_timestamp": "2026-08-12T08:00:04.790286Z"}, {"uuid": "f7822dde-b4c3-4132-8e35-859b2f37bdc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6275", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmy7d45tjm2e", "content": "CVE-2026-6275 - StatCounter\nCVE ID : CVE-2026-6275\n \n Published : May 29, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : The StatCounter \u2013 Free Real Time Visitor Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including...", "creation_timestamp": "2026-05-29T09:17:59.587124Z"}, {"uuid": "cb33412e-097d-4c48-bb30-c3c8cc6f4724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62283", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtmriybo6m25", "content": "\ud83d\udea8 CVE-2026-62283 \u2014 CVSS 9.9 CRITICAL\n\nNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62283\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T22:07:48.876153Z"}, {"uuid": "40a22b8d-7726-4bd2-8f15-facfc408c3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt24ofhoch2y", "content": "\ud83d\udccc CVE-2026-62869 - Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network. https://www.cyberhub.blog/cves/CVE-2026-62869", "creation_timestamp": "2026-08-14T12:07:06.683980Z"}, {"uuid": "bcca6ae0-3a35-46c1-895f-da3cb593f215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/tugate.ch/post/3mt24pc5sqi2b", "content": "A Microsoft lan\u00e7ou corre\u00e7\u00f5es de seguran\u00e7a no ciclo de atualiza\u00e7\u00f5es de agosto de 2026 para resolver a vulnerabilidade de dia zero LegacyHive no Windows. A vulnerabilidade \u00e9 rastreada como CVE-2026-62832 e afeta o servi\u00e7o de perfis de utilizador. \ud83d\udee1\ufe0f\n\n#lan #microsoft #vulnerabilidade #windows ", "creation_timestamp": "2026-08-14T12:07:36.866586Z"}, {"uuid": "a8647c60-b73c-4741-adbc-5a467eef4d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt26e2d2nd23", "content": "\ud83d\udccc CVE-2026-62822 - Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62822", "creation_timestamp": "2026-08-14T12:37:06.867173Z"}, {"uuid": "9a60f1d2-c4da-4d7d-b0b6-d7d86d3850d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62462", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:28.573890Z"}, {"uuid": "270203d7-058a-424f-8b60-b04a6858e20d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mskfr5lcxb2o", "content": "\ud83d\udccc CVE-2026-62873 - Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62873", "creation_timestamp": "2026-08-08T06:07:07.644427Z"}, {"uuid": "45680077-bdd7-4fc4-a8ad-97b115a766f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6vg4yu25", "content": "CVE-2026-62867 - incus\nIf you use Incus version earlier than 7.3.0, a user with project-level permissions can add special settings to a storage volume that cause the system to run extra commands with full\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:20:03.953636Z"}, {"uuid": "ad36b0b9-23a4-4589-bc0c-b0041894f022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtms6wqdxp2y", "content": "CVE-2026-62941 - incus\nIn versions of Incus before 7.3.0, copying a container from one project to another could add risky settings after the system checked whether the target project allowed them. This means a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:20:05.186276Z"}, {"uuid": "d5f73c27-0dc2-4cb4-a239-ecbbdc05312b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62450", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:50.164661Z"}, {"uuid": "09c642c2-ffa1-422c-ba97-e5cb781d2248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62458", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:45:52.375101Z"}, {"uuid": "45d4867e-a13f-4211-9fc1-979f969e1d0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmsqth7wr2p", "content": "CVE-2026-62940 - incus\nIf you use Incus version before 7.3.0 and move a container or virtual machine to another server in the same cluster, the system may apply custom settings that were not properly checked. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#incus #lxc #CVE #infosec", "creation_timestamp": "2026-08-21T22:30:05.711546Z"}, {"uuid": "9b3bb857-e827-44dc-83c2-2e1437ecb07c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62588", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtkws6uosi2u", "content": "\ud83d\udccc CVE-2026-62588 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62588", "creation_timestamp": "2026-08-21T04:37:07.033811Z"}, {"uuid": "025a8a7b-277b-41fb-82ac-f90d69da9717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mtamkhbcsb2k", "content": "CVE-2026-62911: Exchange Authentication Bypass Enables Full Mailbox Takeover", "creation_timestamp": "2026-08-17T02:07:14.068873Z"}, {"uuid": "40fa68fc-a075-46d0-9d69-fab3b41a6569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62599", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:46:39.365036Z"}, {"uuid": "ee96be0f-a333-49aa-9bbf-4508dcefe487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62540", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:47:13.076906Z"}, {"uuid": "ca102704-7224-4360-9f4d-83aa4c45f137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62449", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:49:04.442942Z"}, {"uuid": "cd770540-6b14-4d7f-823d-d864b28cc834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62448", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:49:06.704497Z"}, {"uuid": "0858bf47-0363-40e7-8009-794aecb241fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mskmhqcnab2e", "content": "\ud83d\udccc CVE-2026-62896 - Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62896", "creation_timestamp": "2026-08-08T08:07:07.494085Z"}, {"uuid": "09351605-2077-4353-9b97-79ec6e4eca3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt27zog6v42h", "content": "\ud83d\udccc CVE-2026-62824 - Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62824", "creation_timestamp": "2026-08-14T13:07:06.478223Z"}, {"uuid": "8651d8a1-cc63-4c50-87b3-3c81976fc3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62605", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:27.706386Z"}, {"uuid": "4baf3d25-1619-4e15-ab59-adc6e3cd2f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62585", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtnmbzv7nm2y", "content": "\ud83d\udccc CVE-2026-62585 - Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62585", "creation_timestamp": "2026-08-22T06:07:06.774979Z"}, {"uuid": "fc871a94-f4b4-4fbc-8418-d9ab325b0563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2bpd4o4e2m", "content": "\ud83d\udccc CVE-2026-62800 - Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62800", "creation_timestamp": "2026-08-14T13:37:06.603079Z"}, {"uuid": "ebbbc63f-3812-449f-b1a3-42789dad4cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62608", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:07.126613Z"}, {"uuid": "9e8d6b4e-cd3e-4ebd-803d-732168e20f95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62607", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:09.393598Z"}, {"uuid": "05438c7d-3fe1-4229-8acf-a1390e205d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2dexz7qf2f", "content": "\ud83d\udccc CVE-2026-62795 - Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62795", "creation_timestamp": "2026-08-14T14:07:06.738829Z"}, {"uuid": "0f213a30-c294-47a2-9d9f-4ec6438f1f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62491", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:51:55.233655Z"}, {"uuid": "203a3ce2-a32a-4042-9ca2-cc69df98593a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62600", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:32.215522Z"}, {"uuid": "83a393a3-6c34-455f-9cbf-d8cd49247907", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62601", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T16:52:29.944463Z"}, {"uuid": "177783a6-8d63-4c18-828e-e99bdefa33b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2f2mtzvp2y", "content": "\ud83d\udccc CVE-2026-62785 - Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62785", "creation_timestamp": "2026-08-14T14:37:07.304647Z"}, {"uuid": "1b779bcf-7fb4-4819-b086-7e4290342484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmugizzq425", "content": "CVE-2026-62674 - omnigent\nIn versions of Omnigent before 0.3.0, a user who has edit rights to a project could replace a shared component and cause the system to run any command they choose. Those\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#omnigent #omnigentai #CVE #infosec", "creation_timestamp": "2026-08-21T23:00:07.220608Z"}, {"uuid": "b55ed559-8d45-4706-838c-4eb17e7f7d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt2gqavfbj2f", "content": "\ud83d\udccc CVE-2026-62790 - Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62790", "creation_timestamp": "2026-08-14T15:07:06.403651Z"}, {"uuid": "9f0ddc27-d569-4100-9bc7-b36ad3227689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3fiybuo22", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-62899 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/660\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-12T12:00:55.985448Z"}, {"uuid": "09b70a87-c80d-47ec-bf70-c2257aec879a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3fh5zy72p", "content": "\n\ud83d\udea8 New HIGH CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-62901 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/659\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-12T12:00:53.664481Z"}, {"uuid": "a98bc01a-7a56-4a7b-891d-63be4aece5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3msv3fkun4r24", "content": "\n\ud83d\udea8 New MEDIUM CVE detected in AWS Lambda \ud83d\udea8\nCVE-2026-62909 impacts Microsoft.NETCore.App.Runtime.linux-x64 in 4 Lambda base images.\n\nDetails: https://github.com/aws/aws-lambda-base-images/issues/661\nMore: https://lambdawatchdog.com/\n\n#AWS #Lambda #CVE #CloudSecurity #Serverless", "creation_timestamp": "2026-08-12T12:00:58.074613Z"}, {"uuid": "a7898446-6724-4e96-926c-e396db66c176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117082488596178233", "content": "Attention, elevated activities detected targeting Microsoft Windows (CVE-2026-62878) https://vuldb.com/vuln/388578/cti", "creation_timestamp": "2026-08-12T12:16:36.799157Z"}, {"uuid": "fa7638b2-664f-4f87-8a41-b650c5a4c3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/captechgroup.com/post/3msv62edkh62l", "content": "Microsoft's newest patch cycle closes nearly 400 security holes, among them CVE-2026-62832, CVE-2026-68820, and CVE-2026-72971. That volume makes triage the hard part, so plan which systems get updated first and confirm the rollout finished.", "creation_timestamp": "2026-08-12T12:48:23.671757Z"}, {"uuid": "262cad6b-08ce-45c5-b802-0fec00375f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62616", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:26.209686Z"}, {"uuid": "518876ed-77cf-4abf-bb44-2706b710d65d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62612", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:35.559703Z"}, {"uuid": "b5772e30-f8ab-4e61-b04d-64acc3c56d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62621", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:58.520121Z"}, {"uuid": "73a666e3-8552-4763-894a-dcc82bc9833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6274", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnjwn7yvpe23", "content": "CRITICAL: Redline WR3200 (7.1.3-7.1.7) hit by improper authentication flaw (CVE-2026-6274) \u2014 full device compromise possible. Restrict access & monitor until fix. https://radar.offseq.com/threat/cve-2026-6274-cwe-287-improper-authentication-in-d-2d921cba #OffSeq #IoTSecurity", "creation_timestamp": "2026-06-05T10:30:31.126482Z"}, {"uuid": "bdbac0eb-72bb-4fec-8b79-f486302aea7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d", "content": "\ud83d\udd34 CVE-2026-6274 - Critical (9.8)\n\nImproper Authentication, Missing authentication for critical function, Weak Authentication vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6274/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T10:00:51.422540Z"}, {"uuid": "d736bd56-4bb1-4972-b998-89d88dcf90ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62627", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:44.172276Z"}, {"uuid": "5a0acef3-f237-4ff5-aefa-9eaa35d2a642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62625", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:48.675485Z"}, {"uuid": "c648af00-e3b3-4cd9-86ee-111b16c362f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62614", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:30.923543Z"}, {"uuid": "f80188f7-d468-4611-9179-8799a29897a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6274", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mnjuy6cxuh2d", "content": "\ud83d\udd34 CVE-2026-6274 - Critical (9.8)\n\nImproper Authentication, Missing authentication for critical function, Weak Authentication vulner...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6274/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-05T10:00:51.416047Z"}, {"uuid": "93bad0a8-1dcc-456f-b066-3003dbeed364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62623", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:53.797636Z"}, {"uuid": "136f13bb-dcda-467d-b6f3-b0cfd7b3b6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62617", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:19.343005Z"}, {"uuid": "d9085851-b51e-4769-8fd4-83373f43eb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62629", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:27.721482Z"}, {"uuid": "e5895a77-1613-4c33-bc49-3e65c06705e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62628", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:29.949879Z"}, {"uuid": "077851ff-2199-48f3-ac88-914fad899bb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62626", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:46.428034Z"}, {"uuid": "5d7a0404-16e4-48da-ba82-db1ba9aaddb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62640", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:56.238252Z"}, {"uuid": "a4c9b676-55e6-4607-8f30-706e92347600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62632", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:33.163402Z"}, {"uuid": "e8bf10dc-675b-4a42-bbe6-948cf925b491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6274", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mnjwn7yvpe23", "content": "CRITICAL: Redline WR3200 (7.1.3-7.1.7) hit by improper authentication flaw (CVE-2026-6274) \u2014 full device compromise possible. Restrict access & monitor until fix. https://radar.offseq.com/threat/cve-2026-6274-cwe-287-improper-authentication-in-d-2d921cba #OffSeq #IoTSecurity", "creation_timestamp": "2026-06-05T10:30:31.129724Z"}, {"uuid": "f9d21f87-2a84-4ddc-b5d1-54ba8b06212f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6274", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116697034165158967", "content": "\ud83d\udea8 CVE-2026-6274 (CRITICAL): Redline WR3200 (7.1.3-7.1.7) has improper authentication, allowing full device compromise. No patch yet \u2014 restrict access & monitor traffic. Details: https://radar.offseq.com/threat/cve-2026-6274-cwe-287-improper-authentication-in-d-2d921cba #OffSeq #CVE #IoTSecurity", "creation_timestamp": "2026-06-05T10:30:33.237065Z"}, {"uuid": "8c29f878-fa38-450d-ba21-da377bd2833a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnk2jj44cv2m", "content": "CVE-2026-6274 - Authentication Bypass in DTS Electronics' Redline WR3200\nCVE ID : CVE-2026-6274\n \n Published : June 5, 2026, 9:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerabi...", "creation_timestamp": "2026-06-05T11:40:00.919850Z"}, {"uuid": "b883d62d-b90f-4a49-8169-206f07f7fcf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6274", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnk2jj44cv2m", "content": "CVE-2026-6274 - Authentication Bypass in DTS Electronics' Redline WR3200\nCVE ID : CVE-2026-6274\n \n Published : June 5, 2026, 9:16 a.m. | 1\u00a0hour, 58\u00a0minutes ago\n \n Description : Improper Authentication, Missing authentication for critical function, Weak Authentication vulnerabi...", "creation_timestamp": "2026-06-05T11:40:00.951032Z"}, {"uuid": "fe741dce-dfff-4ecb-98d8-e79447c3563b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62624", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:51.145910Z"}, {"uuid": "2f73f83d-d3d7-4b82-8f9d-9be886b2f6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62622", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:19:56.048206Z"}, {"uuid": "9a1ee613-e30d-45fe-a8ae-874894d8f7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62620", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:00.746932Z"}, {"uuid": "467daa62-6d46-4886-8e10-6f8dffbd2ff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:31.556284Z"}, {"uuid": "04ca7657-95c1-4c02-855e-3cae8a38e639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62915", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:36.226948Z"}, {"uuid": "ae6db242-f121-4578-b82e-51168b6b980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62910", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:48.606847Z"}, {"uuid": "34fb37cd-2db0-497d-b1db-6b4b64c6e7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:04.766219Z"}, {"uuid": "e6ffe01c-80c9-4d43-b42e-209775651eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:54.418696Z"}, {"uuid": "6cea5281-d39e-4305-be9c-9096e69167e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62619", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:12.576732Z"}, {"uuid": "b5119a52-6c38-497d-b30f-dcafcc9ea3b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62613", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:33.347835Z"}, {"uuid": "6540bd36-52c7-40ae-a845-57e3af322a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:50.853964Z"}, {"uuid": "967516aa-b015-482c-8d7b-dbe58c44057b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:33.809174Z"}, {"uuid": "0e8e6108-c384-4b66-a6de-62857e269e5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62912", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:43.481084Z"}, {"uuid": "dde949a5-9857-42b9-bfeb-443b60438566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:53.081861Z"}, {"uuid": "4e61a75b-7f4c-454a-974d-33c6749465e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:02.524207Z"}, {"uuid": "1cccbdf5-2769-465c-aaa0-947f0602b192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:32.678664Z"}, {"uuid": "ea5e1247-348d-4c9c-897e-3857719e85f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:40.360726Z"}, {"uuid": "c1f5955e-d2e6-4256-8dd0-51908e236d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62618", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:17.115107Z"}, {"uuid": "afc87a41-e0e2-4703-9a57-318b7e5cd5d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62615", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:28.483149Z"}, {"uuid": "4f117a7e-7bbc-4038-8885-ee9d3744452d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62610", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:40.577589Z"}, {"uuid": "8615d05c-f716-4af3-a5a0-4c54bc05ce77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62914", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:38.747291Z"}, {"uuid": "caa6ed93-0ea5-4d05-8eb6-fc9d48055e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:46.188543Z"}, {"uuid": "9a3cb6ef-6508-427d-90fb-54f8186020f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:59.985421Z"}, {"uuid": "53353a48-1cdf-490a-903e-b4bf553974d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:28.001794Z"}, {"uuid": "ea901429-70a6-480b-b001-53596f6df616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62913", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:41.115550Z"}, {"uuid": "bcf04fbf-093a-43df-8799-02ccabc14fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62611", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:37.972613Z"}, {"uuid": "91a6d957-df64-4805-b28e-f0b3b02befb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:55.512375Z"}, {"uuid": "3858d991-6e5c-4303-a0cd-f4e135c97acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:15:57.736506Z"}, {"uuid": "b467b626-087b-434b-9056-eca6ffec2176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:06.971429Z"}, {"uuid": "0e9b75b1-fb79-4d45-aab3-ad690993e57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:18.436470Z"}, {"uuid": "00bcfd3d-6940-41d2-ab28-47020d286564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:09.315128Z"}, {"uuid": "587a473f-5b50-46b5-adda-21d0aee9d98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:47.309056Z"}, {"uuid": "95f52877-ba69-4073-a553-4b8d3739418b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:11.520050Z"}, {"uuid": "fc7b1ee1-3589-43a9-8b26-9f28915562db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:13.747617Z"}, {"uuid": "60e7026e-d8d0-48ca-ab89-6a10f355be6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:23.496927Z"}, {"uuid": "85d85708-9870-47a7-89e4-e714e07f4925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:30.474850Z"}, {"uuid": "b912ed1c-1ecf-4daf-ba02-71af37d80c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:15.962421Z"}, {"uuid": "c697e9e0-9b6c-4e57-956e-a1be92a237a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62638", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:14.989288Z"}, {"uuid": "cedcb378-bc85-4a53-80f0-530e18d40ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:21.058120Z"}, {"uuid": "a3bd2234-0348-4bdf-8511-c542880bfdf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:37.393725Z"}, {"uuid": "ea97d12c-6234-46fd-b100-b3ea550fcab0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:25.692818Z"}, {"uuid": "9e0be15d-74ac-4452-ad0d-48ae73a032d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:35.093831Z"}, {"uuid": "ad3cb813-a961-451c-95ed-095a6df09f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62639", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:20:58.499082Z"}, {"uuid": "af116db2-d9fe-4ddc-9d47-15d2cc528783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62636", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:19.602562Z"}, {"uuid": "953c0388-fa05-46f8-a058-eed5ebd04f5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62635", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:24.097773Z"}, {"uuid": "230dec1c-cf96-4587-a08a-c47e7192ae3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:42.651869Z"}, {"uuid": "ac352309-9502-4c8d-ace0-113cbe9c3c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:44.873355Z"}, {"uuid": "6b0d515c-70a0-4e27-bfbc-533f3492ee43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:05.877431Z"}, {"uuid": "0de72d74-f8a5-44c1-b45b-277eb52afd02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:21.610151Z"}, {"uuid": "bbc2c70b-bd18-498c-b45d-8e32b581190e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:35.732791Z"}, {"uuid": "040b121f-82d6-4463-be55-ae8e357f8f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:39.210528Z"}, {"uuid": "c92e1273-f9c8-49ec-9df3-7aaa73820970", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:41.666533Z"}, {"uuid": "b763d24a-2a50-4b0e-92ca-1d49ddbf1124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:02.406388Z"}, {"uuid": "b6edb002-9e61-4442-9146-2ff936f7859b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:35.782716Z"}, {"uuid": "6cc3b6cd-5872-45d0-94a7-0345cbd82fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:42.279704Z"}, {"uuid": "e0f4e570-2104-469a-9893-98846ee6af56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:49.533881Z"}, {"uuid": "d908d923-8fa1-4d61-97d7-e3fd4c42d980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:10.197465Z"}, {"uuid": "58f9fcc1-0f29-4308-b58c-4a50de17b173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:23.638094Z"}, {"uuid": "cf2f12ab-1782-4dca-8eab-d9a9ae02aef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:25.964573Z"}, {"uuid": "e375aa25-9a0a-4319-8205-acfd856ba68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:49.736986Z"}, {"uuid": "a943e5bc-eec6-4265-a5b6-6af7cdf4346a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:51.956877Z"}, {"uuid": "33b50f90-1a64-4e62-969f-dd34584d1e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:56.632492Z"}, {"uuid": "26fbf968-83df-4031-843d-79104042a102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:16:59.042206Z"}, {"uuid": "606008d6-0b0b-4272-8a37-4f72a5b81097", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:10.511454Z"}, {"uuid": "9e507279-152f-4c7e-b10e-6e4588260d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:49.492731Z"}, {"uuid": "2ba62c03-96b0-4f86-9a13-97e72bcf43b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:51.820427Z"}, {"uuid": "bd6934fc-ebf2-4b35-913c-8570a8e321ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:52.938188Z"}, {"uuid": "1a60a7fe-e513-4621-8eea-8b605a36ba79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:55.392073Z"}, {"uuid": "0221010e-dd64-4ee8-809d-3a7c2af077eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:13.884459Z"}, {"uuid": "a11080be-79a0-4645-8c07-48129db942a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:14.299149Z"}, {"uuid": "1dafeccf-b98c-451e-9e94-564f6a0ade0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:18.984073Z"}, {"uuid": "d5dbd3f3-afcf-4888-ab37-c646f6b436a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:28.184095Z"}, {"uuid": "f37226a9-c413-41ec-8a6d-6199dcc8581b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:01.261681Z"}, {"uuid": "ecd9867f-114e-442f-86ff-69233acc99d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:21.657985Z"}, {"uuid": "a92fa14d-451f-48a2-bad2-70fe0e9c3567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:24.020404Z"}, {"uuid": "5fabfca0-47bf-47c4-bf9a-3865b8b4bad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:42.547896Z"}, {"uuid": "53737181-d7cd-4962-af78-0a3c3507e0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:18.399397Z"}, {"uuid": "4bc6415c-a51a-4bf0-b626-7f09fe57e2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:50.911981Z"}, {"uuid": "cf5e2332-8447-4071-aa3d-2604556862c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:57.926385Z"}, {"uuid": "0e78ba27-ea75-47fa-9f50-ea740452da23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:04.653041Z"}, {"uuid": "a62298de-3614-4f45-bb1d-896f4798f374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:03.609587Z"}, {"uuid": "0c7e40e5-1f81-418a-9e22-bbbc21dd70b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:40.263503Z"}, {"uuid": "043c26fd-d94c-4a4c-9e43-989120b9e790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:47.218708Z"}, {"uuid": "022300f8-5544-4793-91d5-6fcd02e815f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:56.605315Z"}, {"uuid": "f49e3c2f-491b-42b4-b604-73619875823e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:12.454745Z"}, {"uuid": "503ef736-0a3e-4b17-af3c-4826c887cfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:16.976927Z"}, {"uuid": "4660d74e-96b4-4313-80f0-1d68991e52b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:08.100295Z"}, {"uuid": "adcf5cbb-2c62-4571-b6b0-4a791464e8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:44.907111Z"}, {"uuid": "512213b2-ad71-49a5-a329-45290ba90539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:10.134072Z"}, {"uuid": "e422ef7f-be6c-4c32-b51d-8a116393369b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:28.744581Z"}, {"uuid": "85a58881-71e9-4d34-8152-f81ed689d402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:31.097249Z"}, {"uuid": "06970f4d-ce53-4e2a-9ea9-484ac795094c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:11.588476Z"}, {"uuid": "3597d39a-7e01-468b-bf6e-69fec483b59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:23.079661Z"}, {"uuid": "19f89ce5-fd33-41f7-9ca0-73c90050843b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:27.609209Z"}, {"uuid": "d2a935b4-b5a1-444d-878e-aac74e69f994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:12.747989Z"}, {"uuid": "ddf46f74-add6-40ab-ab32-44ec763eec4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:17.145571Z"}, {"uuid": "a7b53fd4-ca74-456d-b505-332b7eed7883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:58.897968Z"}, {"uuid": "98d1c395-8490-45e6-9218-874fba2e0a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:44.106002Z"}, {"uuid": "efbffc67-cb89-40f5-bb20-405bc2937dcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6208", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnkh7wk2k72m", "content": "CVE-2026-6208 - IDOR in in HAVELSAN's Geographic Tracking System\nCVE ID : CVE-2026-6208\n \n Published : June 5, 2026, 2:02 p.m. | 1\u00a0hour, 11\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in HAVELSAN Inc. Geographic Tracking System a...", "creation_timestamp": "2026-06-05T15:27:21.147587Z"}, {"uuid": "01dbbc77-552b-4b6a-bcef-d7d36e950449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:14.946428Z"}, {"uuid": "80902117-2561-4b85-94c4-edf7ef50f9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:26.119220Z"}, {"uuid": "01d2389c-cf4b-42fb-b25e-bfedffed3af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:03.487719Z"}, {"uuid": "a31f33cf-b700-4194-9393-02ccd516ac15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:05.701329Z"}, {"uuid": "fa08b727-2a87-490c-ae8f-88ffde585255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:07.910679Z"}, {"uuid": "b60f2c76-1c5c-41e2-899a-d2b9d1cf8984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgdsqwcv2i", "content": "CVE-2026-6241 - Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS\nCVE ID : CVE-2026-6241\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : An authenticated format string vulnerability is present in the ONVIF AddS...", "creation_timestamp": "2026-06-06T00:44:14.592990Z"}, {"uuid": "aad26c77-bba6-4626-a57e-a5d5917ff4a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlgskpkir2q", "content": "CVE-2026-6239 - Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS\nCVE ID : CVE-2026-6239\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : A stack\u2011based\nbuffer overflow vulnerability exists in Tapo C520WS v2 in...", "creation_timestamp": "2026-06-06T00:52:29.515560Z"}, {"uuid": "36ee5141-6908-4d4c-bcad-9971cadcb09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlhgwbmmg2d", "content": "CVE-2026-6240 - Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS\nCVE ID : CVE-2026-6240\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : A stack-based buffer overflow vulnerability exists in Tapo C520WS v2 i...", "creation_timestamp": "2026-06-06T01:03:52.646290Z"}, {"uuid": "d1ba9a94-d9eb-477b-8a5a-04ad8e323778", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlhytj5ru2d", "content": "CVE-2026-6242 - Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS\nCVE ID : CVE-2026-6242\n \n Published : June 6, 2026, 12:16 a.m. | 16\u00a0minutes ago\n \n Description : An authenticated format string vulnerability exists in the ONVIF Subscri...", "creation_timestamp": "2026-06-06T01:13:53.581890Z"}, {"uuid": "cf05ff76-130a-40bd-88d3-a62bab2503b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:19.362096Z"}, {"uuid": "c9f28d27-a5b4-457f-8d13-ba69d7e27047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:54.195050Z"}, {"uuid": "e74da55d-3b49-4bfe-a0db-a4cbfaecde27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:19.309556Z"}, {"uuid": "c365cb27-04e8-4b89-8c2a-ebcab8e6dd47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:30.025485Z"}, {"uuid": "1b1b42c0-81e1-4b95-98cc-83023f3917e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:23.861657Z"}, {"uuid": "2131a206-9217-4641-84a5-413929a25319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:30.893177Z"}, {"uuid": "013c2ac8-a7ac-42c8-a0b3-849be9798de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:42.478244Z"}, {"uuid": "a32b1852-8fa3-4d50-a585-3ea60a5c575f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:57.630008Z"}, {"uuid": "59830735-1e6e-472c-9431-f8686ecfc30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:06.915465Z"}, {"uuid": "6cfee3dc-1e69-4194-8518-9d61844704d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:09.368936Z"}, {"uuid": "c32b735b-4754-4812-bc3d-32a348cd523f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:28.435645Z"}, {"uuid": "1778f0b6-2540-4981-8faf-029c8dcd176d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:33.419593Z"}, {"uuid": "5284e67f-830c-4f18-8184-12618355cf54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:35.669805Z"}, {"uuid": "685e1aea-81a4-49a2-9838-20e826325678", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:01.248211Z"}, {"uuid": "622e2493-1c1b-48b3-8f69-8decaacbf206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:40.235306Z"}, {"uuid": "957547d7-d4d9-42eb-86e2-68f25c1daa86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:04.432522Z"}, {"uuid": "6bf0d466-05e9-4525-ac25-9b6074173ba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:32.257313Z"}, {"uuid": "fb5c3ac5-ea72-47ca-869e-2ca6160b2227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:17:37.993681Z"}, {"uuid": "6e3785ba-bfaf-441c-b0db-5fd7f12b1b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:53.121345Z"}, {"uuid": "0e6d1042-6279-416f-aee3-1d6fde07b620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:21.207701Z"}, {"uuid": "1a782ebe-283f-4c4d-aef1-6030609d8a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:44.821964Z"}, {"uuid": "e90dbe95-6a47-45c4-b613-2260efa6ab3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6297", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mnnrf3ca772i", "content": "\ud83d\udccc CVE-2026-6297 - Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to potentially perform a sandbox... https://www.cyberhub.blog/cves/CVE-2026-6297", "creation_timestamp": "2026-06-06T23:07:08.148989Z"}, {"uuid": "682321a9-7d3e-4f77-943d-bd000d45b08a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:14.748473Z"}, {"uuid": "bf901a50-fae0-45cd-80d3-f6959169862c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:16.162122Z"}, {"uuid": "c2f3f43d-b0a9-41a1-b8a9-2d3503f8ce88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:20.720594Z"}, {"uuid": "903d2108-f46f-4d25-b7fc-662e02ad65b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:36.839127Z"}, {"uuid": "03d71b04-80df-403f-887f-587b4d677022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:55.450744Z"}, {"uuid": "ae763017-8832-4f6a-9ee2-803b0416b0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:00.166393Z"}, {"uuid": "0547c324-1d32-4a84-b0d2-95cd8e08e787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:23.638969Z"}, {"uuid": "74236162-a914-48f3-a8ea-498a8c8fc9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:25.870230Z"}, {"uuid": "4735fb70-9a9d-4d29-9781-5646e2091ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:30.549203Z"}, {"uuid": "3ee6af2f-6bc2-47e7-98d1-620f628670f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:40.047129Z"}, {"uuid": "ad8dc399-1ce3-48ec-8cfd-512f09cee05c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:26.512051Z"}, {"uuid": "88c95e32-c0b4-4d66-9cd0-6f79816e68f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:09.537847Z"}, {"uuid": "6476287b-d26e-481f-a998-20195af4ab16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:33.497877Z"}, {"uuid": "c958f339-e0dc-43d5-8953-a01526f806ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:38.004308Z"}, {"uuid": "b008ee67-1772-4ece-ba7f-264e46ed32c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:47.148683Z"}, {"uuid": "20303b9d-f008-404c-a6f1-26fd31fb2090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:59.866170Z"}, {"uuid": "d41ea383-40ce-480a-a1e5-ac8a625c4787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:02.075199Z"}, {"uuid": "3bd451ab-cf71-47f1-8eb9-2febdb3c50f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62631", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:37.827361Z"}, {"uuid": "1fc8b264-b3b5-4b5e-b22c-d9d9ae80b707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:18:44.902475Z"}, {"uuid": "e11dd2fa-b9c0-4145-9a2a-648f26b72443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:25.358989Z"}, {"uuid": "0b1389d1-d508-4d09-802e-e84802fb3ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:34.509885Z"}, {"uuid": "c55ab1f4-dda4-42ba-9378-de4e4ea0163d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:46.318049Z"}, {"uuid": "b1ea6492-1c20-4c17-9e6e-58d4cbfee1da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:19:48.640852Z"}, {"uuid": "e8807604-5f31-47ef-bdbe-20da44088e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:06.897344Z"}, {"uuid": "f6271bd3-ee04-4bb7-8b2d-1e7d014dc8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:11.979803Z"}, {"uuid": "c882e23b-770b-44a6-8600-afd1455b3b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:16.550842Z"}, {"uuid": "0dc5422e-e067-4ac9-adae-d5ba73fe8018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62630", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:10.492963Z"}, {"uuid": "6a49a9fc-8c10-4784-9780-40716ce7592b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:33.274336Z"}, {"uuid": "eaf1f1e7-a4e4-426c-b6b7-d44a3d124fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:47.289722Z"}, {"uuid": "4a578ea7-36af-47e4-854e-29584af24e12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:54.157900Z"}, {"uuid": "fc095501-0596-4e2f-ad2a-1fee6e29ff46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:56.594182Z"}, {"uuid": "ad533712-7517-4b5f-8c53-59e111fe783f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:51.889989Z"}, {"uuid": "15df190f-a8d7-4ed7-9c30-67639f360c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:20:58.818410Z"}, {"uuid": "26980af4-f529-43d2-9dfc-40ecdd1db37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:01.050176Z"}, {"uuid": "62cd7df3-aba5-4f54-b98c-dc397c56639c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:03.373656Z"}, {"uuid": "6391ca2d-f080-4b4e-811e-6e90e451da77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:05.634902Z"}, {"uuid": "b7f0eb14-9663-4a4e-8ea9-dafb945c9c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62637", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:17.205309Z"}, {"uuid": "c16849b2-11e7-4dae-a4f9-67bd3e03116e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:07.875343Z"}, {"uuid": "036731c8-95a8-4026-b753-d6b4dfe6eaee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:14.706466Z"}, {"uuid": "de797a74-5007-4884-b6e2-636de6aa4f8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62634", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:26.343520Z"}, {"uuid": "a58408ed-a0ae-492b-a3b8-b0ec96d82fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:12.475057Z"}, {"uuid": "664ec0b9-69da-4764-8fd7-8f87fb4db3dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62633", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:21:28.609650Z"}, {"uuid": "c72dab52-4f28-4f5e-9eba-0f572bf2ce0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:16.931380Z"}, {"uuid": "c4a53e2b-9e3f-4c06-bf17-9aafd49a293f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:28.320023Z"}, {"uuid": "42572636-1c0e-4430-a596-4a4d54f9b196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:19.167661Z"}, {"uuid": "edddc7ce-3278-4a47-badc-d1118e74f4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-23", "content": "", "creation_timestamp": "2026-08-12T13:21:21.397755Z"}, {"uuid": "4acd9ae7-1c1f-4998-be3b-67008d8b4dd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62609", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:22:27.381618Z"}, {"uuid": "4fa068a8-fa82-4e30-8b45-a08cf08363c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62574", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:13.926435Z"}, {"uuid": "f46089d1-104f-4e0e-be4e-9477f13432e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62581", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:48.796235Z"}, {"uuid": "2a7ba27f-c458-4940-a234-bf0c5938122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62585", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:41.455034Z"}, {"uuid": "bd96420b-076b-4840-861e-6a7cd0304d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62582", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:46.332474Z"}, {"uuid": "d4cf3a7b-f386-4545-9623-a3215214afb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62588", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:57.952827Z"}, {"uuid": "fddb51d0-4929-4865-8ac0-0e654acc2168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62452", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:04.652514Z"}, {"uuid": "7e3954bf-64fa-40b1-98c0-b39e2c4b59a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62463", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:43.894468Z"}, {"uuid": "e88dc0d8-33d7-48c5-8476-c33b1174fe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62467", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:55.533933Z"}, {"uuid": "ef70e7eb-d173-44fa-b276-cca1682e75f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62589", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:45:53.249480Z"}, {"uuid": "1dfb66a5-d602-4756-940b-16fe95f79cc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mseide4ue72f", "content": "\ud83d\udccc CVE-2026-6267 - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under... https://www.cyberhub.blog/cves/CVE-2026-6267", "creation_timestamp": "2026-08-05T21:37:07.180743Z"}, {"uuid": "472af335-a8b4-448b-b170-7c811a642ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62571", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:06.889366Z"}, {"uuid": "a32d6e5c-0642-45f4-b943-061282c983f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62459", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:16.029100Z"}, {"uuid": "accfc38d-c58a-4424-a2f2-28077211035a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62485", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:48.298494Z"}, {"uuid": "15d5fe2b-8f5e-4146-829a-e8998b9dfde9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62457", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:46:18.284679Z"}, {"uuid": "ab3f56c9-7679-4e65-92e1-cf09b48292d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62481", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:00.015315Z"}, {"uuid": "469bfa09-e62d-4e1d-ae00-4e46b919c8bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62545", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:48:28.420485Z"}, {"uuid": "a79840e5-3827-48b4-aa0a-5e9d1cf5ef67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62233", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocaperzd2f", "content": "CVE-2026-62233 - grav\nThe Grav Plugin API version 1.0.6 or earlier does not properly check user permissions for certain API requests. This allows unauthorized users to gain super-admin access and potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-22T12:40:04.441083Z"}, {"uuid": "3fd3efdf-a4b3-4b8d-be3d-c0a42815053a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62471", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:43.541905Z"}, {"uuid": "119889e6-422d-494f-afb1-c0b417080703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62544", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:48:30.650636Z"}, {"uuid": "36516274-965b-499d-9ae7-0f6872f71544", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62554", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:50:34.172567Z"}, {"uuid": "3dc02af4-58ff-4c67-81d4-63123740d311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62592", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:45.769736Z"}, {"uuid": "87633fed-a470-4e7a-a961-22eba65e6e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62477", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:57.225972Z"}, {"uuid": "f19266ea-22e0-4057-af4a-80e03c9b8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtocsko7op2y", "content": "CVE-2026-62681\nIf you use the Orval tool to create JavaScript API clients and are on a version before 8.21.0, a specially crafted API path can insert malicious code into the generated request functions. When those functions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T12:50:04.055537Z"}, {"uuid": "b4ff3911-40ea-465f-bacb-bcccb6b4a98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62598", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:47:54.959216Z"}, {"uuid": "cf7fcda4-8612-4142-b7d9-837824f3a27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62538", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:24.481382Z"}, {"uuid": "ccf12013-eb83-4271-a31b-43a026860618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62551", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:50:20.727408Z"}, {"uuid": "52b07fc3-6631-44a3-96f0-4107c2b40957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/aegisbot.bsky.social/post/3mtbnoqc7dt2t", "content": "\ud83d\udd0d Top signals this week:\n\nCVEs: CVE-2026-55040, CVE-2026-68820, CVE-2026-63520, CVE-2026-62832, CVE-2026-72971\nActors: Ransomware, Apt, Play\n\nFull intel: https://matlock.ca/cybersecnews", "creation_timestamp": "2026-08-17T12:00:09.530370Z"}, {"uuid": "8e2cbd84-b96f-4de6-b56f-9b2c3d2cbd5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62541", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:48:17.314569Z"}, {"uuid": "359a3f37-4ee9-466e-a2a9-794d2d11c91b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62543", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:48:32.893868Z"}, {"uuid": "1458c17d-6348-493a-8cdf-5469c3c0877c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62531", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:12.940518Z"}, {"uuid": "fd9b9d9b-6807-4ef8-85ae-1213cd1b98f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62552", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:50:18.263276Z"}, {"uuid": "f4f4e420-c4f8-4342-a29f-f218054e8990", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3mtbo2zdsfh2h", "content": "A critical-severity fix just shipped for Microsoft Azure Sql Managed Instance. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-62836", "creation_timestamp": "2026-08-17T12:07:01.855929Z"}, {"uuid": "b9ae7d7e-7020-4127-a0d0-10a51b9b2bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62537", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:28.945135Z"}, {"uuid": "0f5d4520-55fd-4140-bb13-f8c5bd544789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62536", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:32.895208Z"}, {"uuid": "1dd17f4a-8a45-4ff0-9838-eca3206c1b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62539", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:22.252735Z"}, {"uuid": "cf57dc7a-6a73-4b32-877c-255563522f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62535", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:49:35.105572Z"}, {"uuid": "940f5ad4-e4a1-443c-9bc4-2f0a6978c1bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62550", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:50:25.216878Z"}, {"uuid": "f4cc4a5a-62b3-497a-8f66-c0981c485b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62522", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:51:51.135962Z"}, {"uuid": "b7802f46-83d5-488d-8022-d25a169ffcde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62501", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:51:06.087313Z"}, {"uuid": "8c36691a-ab41-47ee-9da2-3ccf1050f24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62500", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:51:08.346033Z"}, {"uuid": "601592e4-0824-4858-bdb0-2e786b262bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62502", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:51:02.633732Z"}, {"uuid": "fe484039-357d-4cbf-91ad-94b95c579159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3msvmo6sgjd2g", "content": "CVE-2026-62747 - Heap buffer overflow in Windows Device Association Service. Local privilege escalation. CVSS 7.8. Patch reported\u2014update immediately. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62747/", "creation_timestamp": "2026-08-12T17:10:00.683704Z"}, {"uuid": "c1302fb2-b985-4890-aa5a-d1fdfd3d7e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117083642288390253", "content": "CVE-2026-62747 - Heap buffer overflow in Windows Device Association Service. Local privilege escalation. CVSS 7.8. Patch reported\u2014update immediately. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62747/", "creation_timestamp": "2026-08-12T17:10:02.242950Z"}, {"uuid": "06d3a5a1-6bfa-477d-8bb7-1fffe739aa3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62727", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtjh6ovdzf2j", "content": "\ud83d\udd17 CVE : CVE-2026-62727, CVE-2026-69550, CVE-2026-62727, CVE-2026-69550", "creation_timestamp": "2026-08-20T14:25:07.282652Z"}, {"uuid": "7009ff1a-9c3e-495a-a873-a9ac5b81e4ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62512", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:12.481534Z"}, {"uuid": "d068fc47-6983-4ddc-b7f0-036037be407e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62492", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:52:34.164215Z"}, {"uuid": "1caaa207-7b26-4c65-af1b-909cdfd59b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62602", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T17:53:00.938842Z"}, {"uuid": "dc5fd343-056e-4867-8329-e29f277a571b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt34jn4msb24", "content": "\ud83d\udccc CVE-2026-62889 - Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62889", "creation_timestamp": "2026-08-14T21:37:06.554862Z"}, {"uuid": "1084881f-21c2-4553-8a1f-6c420dc72eea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6269", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:13.320372Z"}, {"uuid": "070d093b-bf09-4f78-a434-41265da21bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6277", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:13.456967Z"}, {"uuid": "e166f8ed-b6ec-44fc-9649-9deecf8c1466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6269", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "28d1c04d-67b9-467a-a2d2-b65d9b116b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6277", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}, {"uuid": "c1c839a5-4186-4218-aab7-1397d2bf1e65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt367cbg7a2x", "content": "\ud83d\udccc CVE-2026-62792 - Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62792", "creation_timestamp": "2026-08-14T22:07:07.242635Z"}, {"uuid": "17d8312a-58b8-4d66-8ef0-37c94252fca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62283", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtmw44iaqr2p", "content": "CVE-2026-62283 - nezha\nVersions 1.14.13\u20111.14.14 and 2.0.0\u20112.0.9 of Nezha Monitoring do not correctly tie live\u2011session links to the user who created them. A user who can see a session identifier can connect to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nezha #nezhahq #CVE #infosec", "creation_timestamp": "2026-08-21T23:30:05.502566Z"}, {"uuid": "ebcf7eca-ea9b-4f33-9603-b2d0864df69e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62668", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthdalebxe2p", "content": "\ud83d\udea8 CVE-2026-62668 \u2014 CVSS 9.4 CRITICAL\n\nGrav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. Pr...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62668\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T18:09:15.633024Z"}, {"uuid": "66270c86-02a4-4aea-8767-d9b8dc8f3677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6211", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mo44dscrod2p", "content": "\ud83d\udfe0 CVE-2026-6211 - High (8.7)\n\nUnrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services I...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6211/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-06-12T16:00:33.509011Z"}, {"uuid": "76cdff91-51e8-49f9-92a7-e870fd4a0e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6211", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mo4ckkzzfi2p", "content": "CVE-2026-6211 - Arbitrary File Upload in Global IT's WEOLL\nCVE ID : CVE-2026-6211\n \n Published : June 12, 2026, 3:16 p.m. | 1\u00a0hour, 51\u00a0minutes ago\n \n Description : Unrestricted upload of file with dangerous type vulnerability in Global IT Informatics Services Inc. WEOLL allows...", "creation_timestamp": "2026-06-12T17:51:42.019181Z"}, {"uuid": "534ee1bc-04fd-4d6c-a079-1a77894cfb98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt37uwpa4a24", "content": "\ud83d\udccc CVE-2026-62781 - Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62781", "creation_timestamp": "2026-08-14T22:37:07.525378Z"}, {"uuid": "5b7b1741-b934-4207-b582-02212534a528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62988", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtf5yrhw3m2e", "content": "CVE-2026-62988 - froxlor\nFroxlor API endpoints from version 2.3.7 to 2.3.8 leaked sensitive customer and admin information. This allowed attackers with API access to obtain passwords and 2FA codes, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#froxlor #CVE #infosec", "creation_timestamp": "2026-08-18T21:30:05.636025Z"}, {"uuid": "9eb904f9-7d3c-437e-8362-a388c78c5515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62420", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msvzjmyhbt2m", "content": "CVE-2026-62420 - lxd\nAn attacker with access to LXD can move instances into restricted projects without permission. This allows them to introduce unwanted configurations into those projects. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lxd #canonical #CVE #infosec", "creation_timestamp": "2026-08-12T21:00:06.376754Z"}, {"uuid": "91db1a84-342d-4503-b5cc-4900b5a4e630", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt3da7qkpb2c", "content": "\ud83d\udccc CVE-2026-62911 - Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62911", "creation_timestamp": "2026-08-14T23:37:06.702296Z"}, {"uuid": "054ab8c1-fbd2-4cd6-9717-ca769c7ed7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtof23rn7q25", "content": "CVE-2026-62867\nIncus versions before 7.3.0 let a regular user add special settings to a storage volume that are not checked properly. This can cause the system to run extra commands with full administrator rights, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T13:30:03.875516Z"}, {"uuid": "325b8ffa-3fce-468f-b8da-5dd141098282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62587", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:36.387102Z"}, {"uuid": "7b137561-d65b-4270-a92a-321ae696f757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62586", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:02.539446Z"}, {"uuid": "e0113795-2624-457f-9905-17e6f6a88596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62442", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:45.692664Z"}, {"uuid": "7b058804-0e84-4758-bf7c-fa18207832b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62454", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:15:50.760488Z"}, {"uuid": "329b2002-8a38-4408-ba33-5517f83ac03a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "Telegram/rpU8_0BAIqup9jbze7w25ozrvXdkaGKGrrCImb0BnEmBLEk", "content": "", "creation_timestamp": "2026-06-13T15:00:07.000000Z"}, {"uuid": "dc10b9e2-6a65-4e2f-a4a7-457770cae6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62870", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msozbtxha323", "content": "\ud83d\udccc CVE-2026-62870 - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62870", "creation_timestamp": "2026-08-10T02:07:08.503277Z"}, {"uuid": "88db0831-7185-44b4-9b12-36f02a908393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "Telegram/dt0AF8_y_UrMLbm3nbIzl56WQ7K0nt860xLQHDp_bOOwKbw", "content": "", "creation_timestamp": "2026-06-13T15:00:16.000000Z"}, {"uuid": "20a6763f-423b-490e-9258-1d75375a1e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62614", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfan3xm6y2y", "content": "\ud83d\udea8 CVE-2026-62614 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62614\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:14.856754Z"}, {"uuid": "78df44cd-b392-4818-8bdf-eaa6d1a7c260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62455", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:16:15.780885Z"}, {"uuid": "75cf9def-ee9d-4603-87ed-6c37d320f783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62594", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:13.806594Z"}, {"uuid": "879dddb7-c560-4eb4-98f0-4529d55d1044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62593", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:16.539806Z"}, {"uuid": "9fc2aa43-71b3-47f0-b9c1-d2c0882f8243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62592", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaljvwxt23", "content": "\ud83d\udea8 CVE-2026-62592 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Sup...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62592\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:22.645167Z"}, {"uuid": "8f59c66d-06a4-4499-9d33-0b05ebc40dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62596", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:09.092561Z"}, {"uuid": "4e49bd12-5c46-4fba-a50f-10e7a4604b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62543", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfak5wysi2y", "content": "\ud83d\udea8 CVE-2026-62543 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Insta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62543\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:36.464628Z"}, {"uuid": "65fe37b1-0c49-45de-904a-568e7f55e9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62595", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:11.575138Z"}, {"uuid": "a2125df1-bc0e-446b-96f6-b4aa81af0403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62590", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:23.219613Z"}, {"uuid": "084ac386-2e5d-4081-8380-8b3be5a33d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62452", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaiku62l23", "content": "\ud83d\udea8 CVE-2026-62452 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Ma...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62452\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:14:43.115927Z"}, {"uuid": "f149e995-5852-4f5d-93d0-7e3ab64b41f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62457", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaiswn6u2c", "content": "\ud83d\udea8 CVE-2026-62457 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Commo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62457\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:14:51.352042Z"}, {"uuid": "31545850-7f72-48aa-a693-2d0e2b4d3e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62609", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfam2437y2e", "content": "\ud83d\udea8 CVE-2026-62609 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62609\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:39.368786Z"}, {"uuid": "4a003e0b-39c0-4741-8685-5f76a82da8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62591", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10", "content": "", "creation_timestamp": "2026-08-19T18:17:20.986641Z"}, {"uuid": "870950f6-198f-4e64-83fb-3f16aeba2b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62463", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaj3nigx2m", "content": "\ud83d\udea8 CVE-2026-62463 \u2014 CVSS 9.6 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifec...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62463\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:00.354756Z"}, {"uuid": "f13a2f67-66ab-4739-8be7-f249dba305b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62512", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfajeoibu2u", "content": "\ud83d\udea8 CVE-2026-62512 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Ma...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62512\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:09.819427Z"}, {"uuid": "eae06cf6-2b69-47f0-b592-3630ae9b7946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-13T00:00:09.336415Z"}, {"uuid": "0ebb40ec-525f-45e2-8027-a63ac6666b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-13T00:00:09.430022Z"}, {"uuid": "93dac64f-d5fc-4870-9a51-d16e7fb8167e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-13T00:00:09.476271Z"}, {"uuid": "40e77792-985e-430e-8ef4-d6fd8a5b87b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/kasperskyb2b/2286", "content": "\ud83d\udd25 \u0410\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0439 Patch Tuesday \u2014 400 CVE, 3 \u0437\u0438\u0440\u043e\u0434\u0435\u044f\n\n\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043b\u0435\u0442\u0430 \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u0438 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a\u0430, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u043f\u0440\u0438\u0448\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u0437\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043b\u0435\u0442\u043d\u0438\u0435 \u043f\u043e\u0434\u0430\u0440\u043e\u0447\u043a\u0438 \u0438\u0437 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Microsoft \u043d\u0435 \u0434\u043e\u0442\u044f\u043d\u0443\u043b\u0430 \u0434\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0440\u0435\u043a\u043e\u0440\u0434\u0430, \u043d\u043e \u0446\u0438\u0444\u0440\u0430 \u0432 400 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u0451\u0433\u043a\u0443\u044e \u0434\u0440\u043e\u0436\u044c. 176 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, 110 \u2014 \u043a RCE, 86 \u2014 \u0443\u0442\u0435\u0447\u043a\u0430\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 \u2014 \u0441\u043f\u0443\u0444\u0438\u043d\u0433\u0443, 12 \u2014 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 11 \u2014 \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0437 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, 37 \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u0430 5 \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0410\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0437\u0438\u0440\u043e\u0434\u0435\u0439, CVE-2026-68820 (CVSS 7.0), \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 afd.sys. \u041a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u0420\u0435\u0434\u043c\u043e\u043d\u0434 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430, \u043d\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0435\u0433\u043e, \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u043c \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c \u0430\u0442\u0430\u043a\u0438 \u2014 \u044d\u0442\u043e \u0447\u0430\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 Lazarus \u043f\u043e \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u043e\u043c\u0443 \u043d\u0430\u0439\u043c\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \n\n\u0414\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0438\u0440\u043e\u0434\u0435\u044f \u0431\u044b\u043b\u0438 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0435\u043d\u044b \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e CVE-2026-62832 (\u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u0441\u043b\u0443\u0436\u0431\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439)  \u0438 -72971 (\u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 unionfs.sys \u0441\u043b\u0443\u0436\u0431\u044b Windows Container Isolation FS). \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 LegacyHive \u043e\u0442 \u043e\u0431\u0438\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f NightmareEclipse, \u0430 \u0432\u043e\u0442 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0447\u0442\u0438 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e.\n\n\u0421\u0440\u0435\u0434\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b:\n\nCVE-2026-62878  (CVSS 9.8) \u2014 RCE \u0432 DNS Server, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043a\u043e\u0434 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nCVE-2026-62815 (9.8) \u2014 \u0442\u043e\u0436\u0435 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u043e \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 QUIC. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u042e\u043a\u0438 \u0427\u0435\u043d\u043e\u043c, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c, \u0441\u043f\u0438\u043a\u0435\u0440\u043e\u043c \u0438 \u0447\u043b\u0435\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u0430 Security Analyst Summit (\u043a\u0441\u0442\u0430\u0442\u0438, \u043e\u0441\u0442\u0430\u043b\u043e\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0442\u0440\u0438 \u0434\u043d\u044f, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u0434\u043e\u043a\u043b\u0430\u0434!)\n\nCVE-2026-62911 (8.0) \u2014 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 Exchange Server \u0447\u0435\u0440\u0437 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0446\u0430\u0438\u0438 \u0434\u0430\u0451\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u043c \u044f\u0449\u0438\u043a\u0430\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430 Pwn2Own, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0446\u0435\u043d\u043a\u0438 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0430 (exploit maturity: unproven, exploitation less likely) \u0441\u0442\u043e\u0438\u0442, \u0433\u0445\u043c, \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0441 \u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043a\u0435\u043f\u0441\u0438\u0441\u043e\u043c. \n\n\u041e \u0442\u043e\u043c, \u043a\u0430\u043a \u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0441 \u0442\u0430\u043a\u0438\u043c\u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0444\u0438\u043a\u0441\u043e\u0432, \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0437\u0434\u0435\u0441\u044c.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #Microsoft @\u041f2\u0422", "creation_timestamp": "2026-08-13T00:00:09.520938Z"}, {"uuid": "d0c937cd-e180-418f-8787-92e4f28c50bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62539", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfajnz3672f", "content": "\ud83d\udea8 CVE-2026-62539 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Insta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62539\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:19.559087Z"}, {"uuid": "1172bb9d-5e32-4251-9397-3b78b66951fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/A4IPbzoy9Gw8ShHW02tBtHxzpt5OvMxyEW41ZsBI0fYb4Sg", "content": "", "creation_timestamp": "2026-08-13T00:00:44.830503Z"}, {"uuid": "b95c4f7c-e802-4bea-ab1f-94a38e2ced53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/HrUEsiplwCxIIQ-iwDufna6JDGGnbWtxWm3ImyTA7HG0KoU", "content": "", "creation_timestamp": "2026-08-13T00:00:45.114838Z"}, {"uuid": "abfa80d3-df6a-4e3a-9702-a5fdaf911d1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/MVfTmsaSHIB0Ey-kxkJ2IT5SDI5JNsfPWKggKUAVISDEBZA", "content": "", "creation_timestamp": "2026-08-13T00:00:45.250798Z"}, {"uuid": "66978449-45da-4276-ba41-776204f4bcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62541", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfajvysku2u", "content": "\ud83d\udea8 CVE-2026-62541 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Insta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62541\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:28.010987Z"}, {"uuid": "78f9dc91-0d0e-401d-ab40-4ecb26f2ee66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62544", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfakgn7oe2u", "content": "\ud83d\udea8 CVE-2026-62544 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Insta...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62544\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:45.512238Z"}, {"uuid": "c10c52bf-3134-472c-a447-9088f8e4955c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62582", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfakpam422b", "content": "\ud83d\udea8 CVE-2026-62582 \u2014 CVSS 9.6 CRITICAL\n\nVulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62582\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:15:54.471165Z"}, {"uuid": "8495aefd-bb30-435c-a912-ad917725f63a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62585", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfakxt6d62p", "content": "\ud83d\udea8 CVE-2026-62585 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival). Sup...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62585\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:06.061473Z"}, {"uuid": "2659467e-0164-49ba-b2ec-712987313178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62588", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfalacoa72p", "content": "\ud83d\udea8 CVE-2026-62588 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Sup...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62588\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:12.544826Z"}, {"uuid": "a89ed8f3-5d6e-4ebd-aa82-96b592ff40a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62608", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfals76k72p", "content": "\ud83d\udea8 CVE-2026-62608 \u2014 CVSS 9.9 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62608\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:31.091112Z"}, {"uuid": "5811adbd-3dd6-46c0-946c-3c288dfb6b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62610", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfamc4dga2e", "content": "\ud83d\udea8 CVE-2026-62610 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62610\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:47.945320Z"}, {"uuid": "2b6f9f17-c248-4f5e-b7ee-0d502e678f34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62611", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfamkitcn2e", "content": "\ud83d\udea8 CVE-2026-62611 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62611\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:16:56.640564Z"}, {"uuid": "b870f6ba-236e-412d-b58b-a7cf6f1dbbc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62613", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfamtsxh424", "content": "\ud83d\udea8 CVE-2026-62613 \u2014 CVSS 9.3 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62613\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:06.808177Z"}, {"uuid": "99010b0c-9872-4255-a459-604827034e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62629", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaovnv7v2e", "content": "\ud83d\udea8 CVE-2026-62629 \u2014 CVSS 9.4 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62629\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:15.434881Z"}, {"uuid": "d4dbf89e-c303-4fdc-b1ed-73aa8e6e7771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62617", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfane7lmy25", "content": "\ud83d\udea8 CVE-2026-62617 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62617\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:23.567114Z"}, {"uuid": "7c440bcd-d249-40e8-bcf8-e876f74476d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62618", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfanm5uau24", "content": "\ud83d\udea8 CVE-2026-62618 \u2014 CVSS 9.3 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62618\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:31.872212Z"}, {"uuid": "172a877b-111d-44a5-9d3f-782a26138a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62621", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfanuck5i25", "content": "\ud83d\udea8 CVE-2026-62621 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62621\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:41.797107Z"}, {"uuid": "cc4c9220-70d9-48f1-a50c-4568e2fa4cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62624", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaoefkda2e", "content": "\ud83d\udea8 CVE-2026-62624 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62624\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:57.370202Z"}, {"uuid": "5b7c8ef2-eb09-4271-ba0d-3f6ad0149168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62622", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfao4kk7q2y", "content": "\ud83d\udea8 CVE-2026-62622 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62622\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:17:49.346987Z"}, {"uuid": "e27ad181-db75-4aa3-a78c-8f181bc25889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62626", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaomzxms2b", "content": "\ud83d\udea8 CVE-2026-62626 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62626\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:07.038004Z"}, {"uuid": "b0100ab8-b28a-481f-af9d-14a12faf6d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62630", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfap5cz6a25", "content": "\ud83d\udea8 CVE-2026-62630 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62630\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:23.452751Z"}, {"uuid": "65d66f8c-3e3f-43dc-a406-1da962622673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://t.me/true_secator/8501", "content": "Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 PatchTuesday \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2026 \u0433\u043e\u0434\u0430, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u043e\u043a\u043e\u043b\u043e 400, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0438 \u0434\u0432\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 0-day.\n \n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 37 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0430 5 - EoP. \u0420\u0430\u0441\u043a\u043b\u0430\u0434 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:  176 - EoP, 11 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 110 - RCE, 86 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 - \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Mariner, Microsoft Teams, Microsoft Azure, Microsoft Entra, Microsoft Office \u0438 Power Apps, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Microsoft \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 0-day:\n\n- CVE-2026-68820: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Windows \u0434\u043b\u044f WinSock, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u041c\u043e\u0448\u0435 \u041c\u0430\u0440\u0435\u043b\u0443\u0441\u0443 \u0438 \u0414\u0430\u0432\u0438\u0434\u0443 \u0414\u0440\u0438\u043a\u0435\u0440\u0443 \u0438\u0437 Checkpoint. \u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 Lazarus \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b CVE-2026-68820 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Microsoft AFD.sys \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 FudModule, \u0440\u0443\u0442\u043a\u0438\u0442\u0430 \u0434\u043b\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u044f\u0434\u0440\u0430.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2026-62832: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0435\u0440\u0435\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u0443 (\u00ab\u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\u00bb) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u043e \u0434\u0435\u0442\u0430\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441\u00a00-day \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LegacyHive,\u00a0\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse.\n\n\u0423\u0438\u043b\u043b \u0414\u043e\u0440\u043c\u0430\u043d\u043d \u0438\u0437 Tharros \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u043b, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LegacyHive \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n- CVE-2026-72971: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0441\u0442\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Windows (unionfs.sys). Microsoft \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0442\u043e\u043c, \u0433\u0434\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 yhw \u0438 txz.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0435\u044e \u0441\u0438\u0441\u0442\u0435\u043c - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-08-13T01:00:03.849711Z"}, {"uuid": "368fd20f-799a-42dc-8e87-233828d346b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62632", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfapeyz262e", "content": "\ud83d\udea8 CVE-2026-62632 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62632\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:31.547466Z"}, {"uuid": "22a00a47-6f3f-49c0-92aa-b74dd6f68584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62633", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfapnetvu2u", "content": "\ud83d\udea8 CVE-2026-62633 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62633\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:40.453593Z"}, {"uuid": "9cfe5a9e-4ea5-4ed2-bd3a-3f010ccab2fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-13T01:00:33.334093Z"}, {"uuid": "d7b911bf-38af-464e-9ba9-bce06f83bc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62634", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfapvgoou2c", "content": "\ud83d\udea8 CVE-2026-62634 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62634\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:48.760541Z"}, {"uuid": "5a8f331b-1bd6-4f7d-8c0d-f4c9903ae72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62640", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfar6l3jq25", "content": "\ud83d\udea8 CVE-2026-62640 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62640\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:19:31.902036Z"}, {"uuid": "6d8a88e1-5d4f-4436-9d20-c5e1d372561f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62635", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaq672yg2e", "content": "\ud83d\udea8 CVE-2026-62635 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62635\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:18:58.161273Z"}, {"uuid": "23987d94-a4af-4f55-9cca-9a8beb07176f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-13T01:00:32.939632Z"}, {"uuid": "92b76a2f-d555-43fa-a760-2bbf1e569940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0287", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals benoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-56162**, met een CVSS score van 10.0 en de kwetsbaarheden met kenmerk **CVE-2026-50516, CVE-2026-56161, CVE-2026-59115, CVE-2026-62830, CVE-2026-62873** en **CVE-2026-68823**, elk met een CVSS score hoger dan 9, zijn reeds centraal verholpen door Microsoft zelf en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-50481**, met een CVSS score van 9.9 echter, vereist **wel** actie. Deze kwetsbaarheid bevindt zich in de Azure Active Directory en stelt een kwaadwillende in staat om zich verhoogde rechten toe te kennen en daarmee toegang te krijgen tot gegevens en componenten waartoe de kwaadwillende aanvankelijk niet is geautoriseerd.\n\n```\nAzure Monitor Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-47299 | 7.20 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Purview eDiscovery: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65668 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Azure Kubernetes Service: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50516 | 9.40 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Entra ID: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62869 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Connect Sync: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65673 | 7.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Database: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63522 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-56162 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Logic Apps: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-56161 | 9.60 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Active Directory: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50481 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nApplication Insights Profiler: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-49163 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SRE Agent: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62830 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Entra Provisioning Service (SyncFabric): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-59115 | 9.90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70340 | 8.10 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-65806 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Confidential Ledger: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68823 | 9.10 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft 365 Admin Center: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62873 | 9.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Storage Explorer: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57104 | 8.80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-13T01:00:33.011506Z"}, {"uuid": "a83a39a4-17a0-42c0-88aa-ea9ff9255300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62637", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqfzned2j", "content": "\ud83d\udea8 CVE-2026-62637 \u2014 CVSS 9.3 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62637\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:19:06.608611Z"}, {"uuid": "bee3d23c-53ab-4938-b15a-4714fd790a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62638", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqo73qw2e", "content": "\ud83d\udea8 CVE-2026-62638 \u2014 CVSS 9.1 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62638\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:19:14.680953Z"}, {"uuid": "52cc8e06-9028-4235-bcd2-006e71a8760d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62639", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtfaqwe2ve2u", "content": "\ud83d\udea8 CVE-2026-62639 \u2014 CVSS 9.8 CRITICAL\n\nVulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62639\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-18T22:19:23.462987Z"}, {"uuid": "ef6f6c15-7770-484c-bbc2-39ecf644cba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3motsyneres2r", "content": "\ud83d\udea8  ALERT: CVE-2026-6279\n\nCVSS 9.8/10\n\n\ud83d\udccb WHAT IT IS:\nThe Avada Builder (fusion-builder) plugin for WordPress is vulnerable to Unauthenticated Remote Code Execution via PHP Function Injection in versions up to and including 3.15.2. This is due to the `wp_conditional_tags` case in `Fusion_Builder_Condi", "creation_timestamp": "2026-06-22T02:17:07.736377Z"}, {"uuid": "2ea4489f-1edf-4b56-8dbf-53b4a8633ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6292", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mp3rr2wdgt2l", "content": "CVE-2026-6292 mp-customize-login-page (CVSS Score 4.3) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #hacking #wpsecurity #atomicedge #cybersecurity #malware #vulnerabilityresearch #cve #redteam #proofofconcept", "creation_timestamp": "2026-06-25T06:16:17.751262Z"}, {"uuid": "40d7d1e8-534c-4286-ac4b-d5886282cb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mp532chywm2u", "content": "CVE-2026-6291 - Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption\nCVE ID : CVE-2026-6291\n \n Published : June 25, 2026, 4:41 p.m. | 1\u00a0hour, 3\u00a0minutes ago\n \n Description : Bleichenbacher padding oracle in PKCS#7 KTRI decryption. When decrypting PKCS#7 Envel...", "creation_timestamp": "2026-06-25T18:35:11.191733Z"}, {"uuid": "7efe04e1-f77b-4198-88f6-dfef10961dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3msqf4xn2vq2z", "content": "Someone dropped this Windows LPE writeup online yesterday along with a PoC.\n\nBut the mentioned CVE-2026-62737 is not released yet, maybe it will be in the Patch Tuesday tomorrow.\n\nAnd the PoC still work in the\u2026\n\n\ud83d\udd01 RT @tacbliw | reposted by @HackingLZ\nhttps://x.com/tacbliw/status/2086812355464405161", "creation_timestamp": "2026-08-10T15:11:48.468549Z"}, {"uuid": "cdb745ef-56fa-487e-a71e-ecfdab394ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62988", "type": "published-proof-of-concept", "source": "https://github.com/froxlor/froxlor/security/advisories/GHSA-7788-ghfq-c6mh", "content": "", "creation_timestamp": "2026-08-18T22:35:21.108934Z"}, {"uuid": "56a63137-91c9-4f52-961f-0c87cddbd8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62668", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthhr5af5y2e", "content": "CVE-2026-62668 - grav\nGrav API Plugin, used in Grav CMS, allows unauthorized access to local files and internal services if an attacker with 'api.webhooks.write' permission submits a malicious webhook URL. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-08-19T19:30:06.177481Z"}, {"uuid": "f6a7c20b-1021-4537-8e20-7a1cb875d654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:38.313629Z"}, {"uuid": "2a8c181c-03b1-49d1-bd48-ed356365ecbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:10.800766Z"}, {"uuid": "9681f694-5700-4d5a-b983-4c930976ad82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:29.026150Z"}, {"uuid": "48dcf466-a447-4bfb-8fa2-1341bcf7d1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:13.247416Z"}, {"uuid": "5e2068ae-c2dd-4260-ae30-a708ca15c5bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62289", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hyx6n45pbx4xt", "content": "CVE-2026-62289 - libheif: Integer underflow in Fraction constructor via double clap transform application\nCVE ID : CVE-2026-62289\n \n Published : Aug. 18, 2026, 9:19 p.m. | 12\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and...", "creation_timestamp": "2026-08-18T22:46:56.487781Z"}, {"uuid": "2286a647-ea48-4a7e-ad7a-7f0c661a6e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:26.781782Z"}, {"uuid": "c6571bf9-55ae-4983-ba3a-2d262879abfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:45.043921Z"}, {"uuid": "3db6b4f0-8f41-416a-9f8f-36ccea7a5d7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:54.413201Z"}, {"uuid": "4f2b1926-6ff6-4fec-b312-07883ac84d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:56.885177Z"}, {"uuid": "87e3efdf-80d0-49fd-ac85-5e80ec606c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:40.557403Z"}, {"uuid": "27df384a-fd81-485e-b8e5-b0491f7712c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjy3k6bq2t", "content": "\ud83d\udea8 CVE-2026-62681 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62681\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:09:46.710209Z"}, {"uuid": "7adff6ec-4f11-4167-8197-53afef0afe17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:06.283025Z"}, {"uuid": "8f63e90e-cd93-43f0-a6a2-e3ca33544cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62292", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6fytcebjkfddg", "content": "CVE-2026-62292 - libheif: Out-of-bounds read in uncompressed unci tile range slicing\nCVE ID : CVE-2026-62292\n \n Published : Aug. 18, 2026, 9:20 p.m. | 11\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.1, a crafte...", "creation_timestamp": "2026-08-18T22:52:56.686039Z"}, {"uuid": "8b5c608c-c19a-4e72-8361-de3705fcf524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62682", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthjye4kop24", "content": "\ud83d\udea8 CVE-2026-62682 \u2014 CVSS 9.3 CRITICAL\n\nOrval generates type-safe JavaScript clients in TypeScript from OpenAPI v3 and Swagger v2 specifications. P...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62682\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T20:09:55.667854Z"}, {"uuid": "87f36bbb-1adf-448b-b34a-b29443fab113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:59.245377Z"}, {"uuid": "5601f0c0-f32b-4f84-ae30-2cc921891046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/62qlbwy56xq6j", "content": "CVE-2026-62291 - libheif: Heap out of bounds write in libheif uncompressed encoder when writing images with mismatched auxiliary alpha dimensions\nCVE ID : CVE-2026-62291\n \n Published : Aug. 18, 2026, 9:21 p.m. | 10\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file f...", "creation_timestamp": "2026-08-18T22:58:57.395652Z"}, {"uuid": "7adf3321-8181-4514-b620-85de689c316a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:15.678041Z"}, {"uuid": "0828008e-0772-4802-91ed-2f9e81509ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62283", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtoflybl3u2f", "content": "CVE-2026-62283 - nezhahq\nNezha's terminal and file manager features have a security flaw that allows an attacker to take control of a session on a remote server. This can happen if an attacker learns the ID\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nezhahq #Golang #CVE #infosec", "creation_timestamp": "2026-08-22T13:40:03.939387Z"}, {"uuid": "933c178c-2c1b-4c15-a379-ddd38ce90f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:17.913641Z"}, {"uuid": "453d4c1b-a600-47f4-a3fb-cede309d63c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:49.876792Z"}, {"uuid": "890e7b3e-290d-43fc-948c-cd213fdea8ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:08.536420Z"}, {"uuid": "34d0a403-0bb7-44bf-ab8f-bfc994ab9d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:47.380023Z"}, {"uuid": "ad931163-29a7-4c2a-b819-eb43f031e374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:52.078085Z"}, {"uuid": "fb56b083-438a-4650-abc6-cf42f34c2f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:01.750762Z"}, {"uuid": "81941d96-4084-4e89-95d5-0cbba9fb6545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:42.790674Z"}, {"uuid": "e2d50361-ec5c-486f-b1f0-13665179c3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:04.021860Z"}, {"uuid": "61836d08-a280-4664-b97d-b7d2d0083e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62914", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:50:24.788024Z"}, {"uuid": "889ca9d2-7bb3-4d31-a401-3d5ac6416705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:24.501723Z"}, {"uuid": "7aa1bb18-f2fd-48f4-a5fd-d03fb8942dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:35.856574Z"}, {"uuid": "2f10766b-14ef-4e6b-86a3-2d8b1f37ce79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3cv2epxz367pg", "content": "CVE-2026-62377 - libheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)\nCVE ID : CVE-2026-62377\n \n Published : Aug. 18, 2026, 9:22 p.m. | 9\u00a0minutes ago\n \n Description : libheif is a HEIF and AVIF file format de...", "creation_timestamp": "2026-08-18T23:00:56.935858Z"}, {"uuid": "3f3ef9c7-4aec-417f-9d5b-1161f2a5f6be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:31.296480Z"}, {"uuid": "f2d59bf2-ee86-4760-8f47-8bbb7ddca184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:49:33.565058Z"}, {"uuid": "07f974c3-6b0f-4c6c-afd0-1565dc315109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:20.248900Z"}, {"uuid": "e1704233-5efc-4c16-bbc2-51abdcb7f56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:22.508145Z"}, {"uuid": "1a5b9756-47b5-4bf8-80c9-5bad766b1041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:27.558334Z"}, {"uuid": "acf2472b-12af-43b7-803c-3971875e21a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt3nc2u6pe23", "content": "\ud83d\udccc CVE-2026-62893 - Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62893", "creation_timestamp": "2026-08-15T02:37:06.056066Z"}, {"uuid": "f96229b5-7b24-49c8-beef-6222eb827461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:29.790586Z"}, {"uuid": "eee807a5-532e-4978-b177-de51cfcdf504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:32.986107Z"}, {"uuid": "397dff35-32bb-43c3-8ac4-2b5af2dfd8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:35.228736Z"}, {"uuid": "9bbbee50-abd8-4b00-ad1d-4287374d4ded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:37.482804Z"}, {"uuid": "aedae327-33fc-4cec-9d7e-3067cf726dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:53:06.820844Z"}, {"uuid": "1c9db453-7aa2-4c95-83b6-78a353557fce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt3oxq6mvq2y", "content": "\ud83d\udccc CVE-2026-62815 - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62815", "creation_timestamp": "2026-08-15T03:07:06.947402Z"}, {"uuid": "aa31a394-0d6c-4e3d-8b24-5c9fc3a5acba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:39.742035Z"}, {"uuid": "66d9813c-8c78-4c89-ae05-ac12787b48c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:42.092240Z"}, {"uuid": "da3b6e30-cd8d-4840-9174-43c1afe1cd85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:14.913361Z"}, {"uuid": "de5be084-beb1-4182-b0ee-45096be5890d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:44.374281Z"}, {"uuid": "0c4b5f7e-53a3-450a-9085-2e9e26fe0b25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:02.799503Z"}, {"uuid": "1b4fa71c-b0ca-4ea3-b646-99db5892aa97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:19.705398Z"}, {"uuid": "1b80acda-fcfe-4da8-8b2a-10b6b9d2f6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:46.627962Z"}, {"uuid": "5723d3c0-e2a5-496f-80c2-bd2cc647db6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:26.434764Z"}, {"uuid": "2b561137-6757-4a8b-b4aa-519209b210fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:57.731516Z"}, {"uuid": "8a26d3f0-5311-492f-836c-83b38f25b4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:48.865770Z"}, {"uuid": "2dc3b24f-52a0-40ff-98a4-2ba0dd7b13dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:12.689793Z"}, {"uuid": "349d41a3-07d0-4ec2-937f-8d6e83231656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:21.972599Z"}, {"uuid": "5ac3f418-5355-40dc-afa4-609d7eab4df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62912", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:51:38.634415Z"}, {"uuid": "6af35ab1-6449-411f-b731-f3e383fdc562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62915", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:51:40.912671Z"}, {"uuid": "49329f2d-abb3-49a4-99d7-9f27cf8e1d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:53:04.473002Z"}, {"uuid": "878a850f-6048-4c26-9c4a-116333690e3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:51.094476Z"}, {"uuid": "174a5544-e950-4b6d-8a69-795280b8fd8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:55.251928Z"}, {"uuid": "0e7f0735-93ae-4847-bf94-214fd1e302c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:53:09.049009Z"}, {"uuid": "b0bb89bb-5289-4712-a1cf-002cea61ca71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jtvriepwcgezg", "content": "CVE-2026-62317 - Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)\nCVE ID : CVE-2026-62317\n \n Published : Aug. 19, 2026, 7:41 p.m. | 8\u00a0minutes ago\n \n Description : Logto is the modern, open-source auth infrastructure for SaaS and AI apps. ...", "creation_timestamp": "2026-08-19T20:21:44.389925Z"}, {"uuid": "12a5133d-cec3-4f0b-9e13-527174d05cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:53.413560Z"}, {"uuid": "189e7bb2-a6ff-42e6-912d-f719179877c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:55.704709Z"}, {"uuid": "fd967f92-9132-43b2-afd3-4c2f1b86550d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:50:58.356026Z"}, {"uuid": "bd3840ba-2022-4977-8b6d-1053d684ff66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:00.579024Z"}, {"uuid": "e39c35c2-d59a-4c09-a6be-c5c73458a136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:17.325049Z"}, {"uuid": "859c4b99-404a-40d0-9af4-91904514002a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:05.337634Z"}, {"uuid": "dc8dd9da-d6e1-45c8-9b19-2613bb24659c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:07.945772Z"}, {"uuid": "34ec93b4-7c5d-4dfe-b367-4f43573c4a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:10.425334Z"}, {"uuid": "c24d3c19-1ab0-435a-b32d-152b340549e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:24.213168Z"}, {"uuid": "8f0f7852-8836-4791-8839-88cf5374bb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:47.650414Z"}, {"uuid": "527a75f4-dec5-4619-9a7e-89223bd3c483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:50.184141Z"}, {"uuid": "899a412e-8384-42d5-80d3-91df774b7a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:53:11.283235Z"}, {"uuid": "1883d5e9-a1ac-4d56-a827-fa6636904c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62913", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:51:36.217336Z"}, {"uuid": "12a21bb6-4108-4281-8028-f85324984264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62927", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msg2mofdzy2f", "content": "\ud83d\udccc CVE-2026-62927 - In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authori... https://www.cyberhub.blog/cves/CVE-2026-62927", "creation_timestamp": "2026-08-06T12:37:06.843685Z"}, {"uuid": "aa544a06-6f88-4b85-a17a-7038cda4b4f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T08:51:45.411574Z"}, {"uuid": "3dada9c1-ee32-4fff-9e97-8318ee1a78d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:53:02.238356Z"}, {"uuid": "e5f401c6-2bf0-425b-b061-98cdfe8d7e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62592", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtlrmhsuvh23", "content": "\ud83d\udccc CVE-2026-62592 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62592", "creation_timestamp": "2026-08-21T12:37:06.724008Z"}, {"uuid": "b8015c0d-13dc-4b5d-8bf1-984f6be970dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T08:52:59.993709Z"}, {"uuid": "737a185a-f47d-4c18-b9d5-cd6e1427ad55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/117072516662642127", "content": "Somebody posted a Windows 11 LPE writeup, with a CVE that doesn't yet exist (CVE-2026-62737).\nBy poking at kloader's ExecutionContext, we can get kernel mode execution at an arbitrary address.\nA stock Windows VM won't have a NIC that uses the NetAdapterCx framework, so will not show as affected.  But you can start that service to see it in action.\nThe PoC has a hard-coded 0xFFFFF80041414141 as an execution target.  I'm sure that somebody knowledgeable with Windows kernel stuff can figure out how to modify this to do something useful.\nPerhaps CVE-2026-62737 will be included in this Patch Tuesday lineup?", "creation_timestamp": "2026-08-10T18:00:38.586482Z"}, {"uuid": "c7f86e20-0ec6-484a-9761-66463e15adf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqolaqsaao2", "content": "Somebody posted a Windows 11 LPE writeup, with a CVE that doesn't yet exist (CVE-2026-62737).\n\nBy poking at `kloader`'s ExecutionContext, we can get kernel mode execution at an arbitrary address.\n\nA stock Windows VM won't have a NIC that uses the [\u2026] \n\n[Original post on infosec.exchange]", "creation_timestamp": "2026-08-10T18:01:05.660076Z"}, {"uuid": "36fb9ebb-670d-4204-b2ca-9720fd7ec032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:02.556543Z"}, {"uuid": "a0271273-b2e3-476a-bab5-ff8e500cb285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:09.315999Z"}, {"uuid": "18d8660a-11c7-432e-a75a-7442ef9858d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:40.548628Z"}, {"uuid": "3a667eb9-377f-4855-a482-f4b92d343db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:56.566584Z"}, {"uuid": "063b6bcf-0407-455c-a932-2b7cf0653ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:59.027789Z"}, {"uuid": "f0c08534-a307-4e83-b7df-95f28ca8eefa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:17:01.370389Z"}, {"uuid": "e051a505-b6de-407f-bdcf-6e7734227dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:17:03.642143Z"}, {"uuid": "237b4071-7584-4a1d-9083-3bfb51939a20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:17:06.408401Z"}, {"uuid": "8a79e8b8-d46c-4e90-9103-0cb3fb375f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:46.899915Z"}, {"uuid": "568fe42d-023b-460e-9ee4-737e05c58c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:03.176465Z"}, {"uuid": "ba4127d7-94fe-4891-9d1e-6f42d1ab7109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:14.709956Z"}, {"uuid": "5f219902-c840-4d5a-8315-c3f8d8f9445d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:17.157115Z"}, {"uuid": "29cf3368-113a-4b25-8d71-f8913f61ffa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:11.674507Z"}, {"uuid": "c627e9da-af2e-4030-81a0-9f0662e5ac93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:23.469805Z"}, {"uuid": "27e148dd-3942-49f5-9c51-968b13e18c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:01.387256Z"}, {"uuid": "5cd2aebb-81b7-4b91-b88e-870ac17b6f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:21.205715Z"}, {"uuid": "b56abd9b-07fd-4d82-a695-fe268756b046", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:25.821313Z"}, {"uuid": "680b7a02-f865-457d-b6ee-d8fcc4f791cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:45.047696Z"}, {"uuid": "c704eefd-6952-4336-9e25-34ff019199d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:51.872054Z"}, {"uuid": "43a810c3-51a6-48cb-bc1c-bbdb359bb35f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:39.899453Z"}, {"uuid": "853dda52-b833-4900-a553-058d430cbf3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:49.140965Z"}, {"uuid": "369bc45e-db35-411e-8160-831697baf215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:51.580455Z"}, {"uuid": "2208a7e2-bd24-492d-bd8f-b1e13e71da05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:53.798671Z"}, {"uuid": "2a53f68c-12b9-4875-a213-cf3bbbb985ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:56.244271Z"}, {"uuid": "766a4cc0-bc1e-4e89-b2f1-7823880f0804", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:24.125240Z"}, {"uuid": "f9c271df-ca8a-4643-892f-bddb6f6b7384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:28.201874Z"}, {"uuid": "9f5335b2-a564-4754-b46b-7e6a532271f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:49.705337Z"}, {"uuid": "312739b6-4770-4f23-9c7c-87366744141d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:51.929739Z"}, {"uuid": "6ca3512b-961e-42dc-a2b7-a2144b617d41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:56.637609Z"}, {"uuid": "63f93fe1-9a4a-4653-8547-73138e9d53b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:33.631137Z"}, {"uuid": "0ce29060-5994-456d-8ddd-3760d1ba0a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:47.393479Z"}, {"uuid": "1e423c01-f834-4345-a4e8-13583db7ce71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:11.149869Z"}, {"uuid": "2971a072-49b9-4a5e-b9f1-63371a9b686f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:47.413339Z"}, {"uuid": "a0d538be-900e-45ff-b755-4e101e5210aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:44.951693Z"}, {"uuid": "4aca82c4-399e-4bbb-91da-59d80eb514d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:54.292127Z"}, {"uuid": "a59448e5-ff60-412e-b4c5-0c35fdd8e8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:15:59.004916Z"}, {"uuid": "cf9bd187-3a9d-4f15-958e-8b09753f25da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:38.304232Z"}, {"uuid": "345f7dd9-307f-4ea7-9d86-b2487a0ec000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:15.865837Z"}, {"uuid": "f7ef69f4-a202-4023-b7f4-5f8d8c6d517e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:18.327292Z"}, {"uuid": "44362e4c-957b-41da-948f-7adcee4f61a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:35.864304Z"}, {"uuid": "3baef6e2-bf08-4e7a-8a2f-ebefe7c4c519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:42.807032Z"}, {"uuid": "4b5919dc-433b-4390-8835-b778f66746c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:16:54.320114Z"}, {"uuid": "61bbf603-ac31-4e4c-9b89-d205d7dfcc82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:17:08.903356Z"}, {"uuid": "aa6127c7-22b2-49e3-8219-308a35f692f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:13.403496Z"}, {"uuid": "c49a7ae1-fd44-4ecc-8d50-2f9c5c294539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:35.414069Z"}, {"uuid": "1c4179ba-407a-4044-89d1-a2435f89b0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:37.652868Z"}, {"uuid": "548d104d-6bc4-4031-b707-d69102d19ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:10.025598Z"}, {"uuid": "3e8cb1fc-21b7-4ee3-9f5c-6c71c9f5d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:23.118460Z"}, {"uuid": "e2b4951e-c979-4bac-80dd-5aadba64a933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:07.785252Z"}, {"uuid": "42a06431-87f7-4160-850a-568251de7a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:20.774063Z"}, {"uuid": "61af154e-6de7-471b-b44d-12e8dae13116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:27.820094Z"}, {"uuid": "3a12f978-069d-4b60-8526-155c43392d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:30.366592Z"}, {"uuid": "9c765480-0909-4c97-8cd0-1ea7fbd9a032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:25.596332Z"}, {"uuid": "92aac6f2-9034-43e9-acb3-22144318f92c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:33.136310Z"}, {"uuid": "b6c457c3-af03-44d4-a226-14ecbf69a79d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:18:58.490070Z"}, {"uuid": "fe99476f-173a-44a1-98d5-34632470a617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:00.931935Z"}, {"uuid": "eba5b4b6-ed54-47e5-8c56-d4cbdebcb883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:05.502573Z"}, {"uuid": "513d3896-a214-4543-9b4b-0c8fb3440cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:12.459120Z"}, {"uuid": "3af06714-5e86-45f6-ab92-5c0c2be46aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:19:21.737796Z"}, {"uuid": "ce58b0d8-b684-4e04-a620-31bc6271a878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:33.524524Z"}, {"uuid": "444e8852-8f95-4444-96ec-17271d13406c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:38.153228Z"}, {"uuid": "dfc08750-d197-4540-b7a7-087c6f305cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:35.868596Z"}, {"uuid": "3777a4d4-0734-4de7-a30d-ebf0d176878f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt462jx5bh2c", "content": "\ud83d\udccc CVE-2026-62872 - Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62872", "creation_timestamp": "2026-08-15T07:37:07.560945Z"}, {"uuid": "5121657c-c94f-49e3-aad3-7d41a4f45bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:40.462510Z"}, {"uuid": "901cc035-d403-4623-a8db-43d6105956fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:45.280104Z"}, {"uuid": "f9680aba-ac3b-4257-b1fb-0a83b9080f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:47.542947Z"}, {"uuid": "7a568f25-bb0b-4022-bb2f-794fb8af913d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:11.081253Z"}, {"uuid": "f2672178-e0a3-44c3-b637-20d33cc8d6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:22:03.714474Z"}, {"uuid": "f70f390a-0936-488e-acb8-fbb511d55bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:58.984985Z"}, {"uuid": "52da3ab7-21e9-4d83-bc83-c3c0d4306038", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62910", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:20.728296Z"}, {"uuid": "90c1ac48-19f2-4094-8c37-4b5d37f5bd3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:25.507074Z"}, {"uuid": "468e1046-59dd-4e24-8b48-d5c0df8322be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:28.685594Z"}, {"uuid": "e427b82c-1b40-4c3d-ba8e-6817df7665da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:49.790871Z"}, {"uuid": "6850899d-7f37-4b74-9e38-03ade8771db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:54.428288Z"}, {"uuid": "3303b903-1b61-43f4-92a0-a8a1fb972200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:22:01.238530Z"}, {"uuid": "08d79596-cd88-4832-ac63-d7efc4c14bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-15T08:00:07.578972Z"}, {"uuid": "f278fd3a-8f40-4a2b-9e47-b8a987993906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:31.248884Z"}, {"uuid": "8bb723e6-3715-4273-be89-9f73c3bde1fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:42.927051Z"}, {"uuid": "4a431a97-76f8-4a94-835a-d8652b1b1d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:21:56.722503Z"}, {"uuid": "97160732-57ed-4a77-abf7-f5698a04500c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1001", "content": "", "creation_timestamp": "2026-08-13T09:22:06.178745Z"}, {"uuid": "d7fabee1-662c-4925-90e5-f3198b50822e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:08.622747Z"}, {"uuid": "40f3b5b1-77e2-44d8-9683-49fb33e006cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:15.803013Z"}, {"uuid": "39f38913-ec11-417e-93c0-b9e68ab51f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:18.258973Z"}, {"uuid": "4ded5663-a13d-4808-9444-9c44fe0ba287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:23.180254Z"}, {"uuid": "11f8b4cf-1b30-4d3c-9719-2bf967e44eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1004", "content": "", "creation_timestamp": "2026-08-13T09:22:13.349177Z"}, {"uuid": "8ab9e23e-28bf-48f3-af93-dfcc177153a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt47q64qgr2f", "content": "\ud83d\udccc CVE-2026-62823 - Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-62823", "creation_timestamp": "2026-08-15T08:07:06.888621Z"}, {"uuid": "152d76c6-76e7-45a5-8582-7e6a460e7074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6283", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpms4bf2cf2t", "content": "CVE-2026-6283: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/18310260-9CFC-416A-80B8-F125AF870C5D", "creation_timestamp": "2026-07-02T00:37:49.495013Z"}, {"uuid": "95ffde70-b6ae-490d-a239-1ec68d70d2b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt4bfsjn4e2u", "content": "\ud83d\udccc CVE-2026-62816 - Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. https://www.cyberhub.blog/cves/CVE-2026-62816", "creation_timestamp": "2026-08-15T08:37:06.604539Z"}, {"uuid": "8701a3ad-a0e0-4344-b9ef-1a433b5cb1df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6283", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmugd4fp32o", "content": "CVE-2026-6283: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\n\n\n\nhttps://kripta.biz/posts/00741D20-73EF-4CD9-979F-041D7E32FA19", "creation_timestamp": "2026-07-02T01:19:14.025869Z"}, {"uuid": "8a49b74c-ed9a-4568-9f50-3454644ff5fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6283", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpmwh2thj32y", "content": "CVE-2026-6283: \u0423\u0433\u0440\u043e\u0437\u0430 XSS-\u0430\u0442\u0430\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445\n\n\n\nhttps://kripta.biz/posts/3E4B6A77-2C7A-4834-9F15-93DB04834319", "creation_timestamp": "2026-07-02T01:55:27.529269Z"}, {"uuid": "e199b68c-c67a-4a4f-bd5b-d23fd910c2d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt4d3hlbzy2v", "content": "\ud83d\udccc CVE-2026-62818 - Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62818", "creation_timestamp": "2026-08-15T09:07:06.927766Z"}, {"uuid": "5447bc0a-33e5-40e9-ab1f-3e1c6557d9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62913", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt4er3ndug2f", "content": "\ud83d\udccc CVE-2026-62913 - Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62913", "creation_timestamp": "2026-08-15T09:37:06.472679Z"}, {"uuid": "35dbe467-69ba-48f9-8b26-cb3c7dedeff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtfk4syqg22y", "content": "\ud83d\udccc CVE-2026-62820 - Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute ... https://www.cyberhub.blog/cves/CVE-2026-62820", "creation_timestamp": "2026-08-19T01:07:06.644824Z"}, {"uuid": "10b08ccf-6834-415a-8817-b7967374cb9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1000", "content": "", "creation_timestamp": "2026-08-13T09:49:20.904101Z"}, {"uuid": "9d949474-fb46-4690-98cd-c4b1e42a9c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:54.631275Z"}, {"uuid": "759e9ac7-a142-4c5b-9e90-a5fd3dc6a5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1000", "content": "", "creation_timestamp": "2026-08-13T09:49:18.672240Z"}, {"uuid": "80604c72-7127-480e-83a0-81c254480380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:33.005729Z"}, {"uuid": "bdd4536b-704b-4be9-8930-30e99cdb8adf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtflsi4s5w2c", "content": "\ud83d\udccc CVE-2026-62778 - Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62778", "creation_timestamp": "2026-08-19T01:37:06.656623Z"}, {"uuid": "40ea9607-11da-4696-88aa-0cf0eb3e94d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:35.559106Z"}, {"uuid": "1fbd7280-2936-4c88-a43e-023e0b1c0eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:42.829057Z"}, {"uuid": "b331b09f-3363-4f25-8aaa-99363b982777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:38.333965Z"}, {"uuid": "cbfe53e8-3f07-4fda-bfad-164b22ff4dfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:40.601889Z"}, {"uuid": "9975ec02-a1fd-4cd1-902c-8fcdd5854d46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:47.720911Z"}, {"uuid": "ce1ca452-4718-4fe8-b1c9-4c1a62335c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:49.948221Z"}, {"uuid": "005b2217-ded8-4f32-ac09-548119bb48dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:45.262523Z"}, {"uuid": "383ccb98-98df-447d-b00c-1b941bf8a0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1002", "content": "", "creation_timestamp": "2026-08-13T09:48:52.184448Z"}, {"uuid": "b49512cf-6907-4a86-b003-2ded5e7bd7f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T09:52:28.853969Z"}, {"uuid": "9cb033e0-c55b-4dfc-bca5-1150f2e37ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62457", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfpuz2usl2t", "content": "CVE-2026-62457 - oracle hyperion infrastructure technology\nThe Oracle Hyperion Infrastructure Technology software, specifically the Common Events component in version 11.2.25.0.000, has a security flaw that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T02:50:06.385113Z"}, {"uuid": "2bd2cf71-3117-470a-b8b5-c3578617ca80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:49.061029Z"}, {"uuid": "bbf4fdea-b906-456e-b50a-cefb16615f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:51.366197Z"}, {"uuid": "2681c4e7-04d3-4fa2-9fd5-ab116789ef42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:30.673900Z"}, {"uuid": "68739127-e72b-4236-a86b-2fbf439064b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:01.052425Z"}, {"uuid": "81eafe58-9fb8-4798-9684-51061236a90a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:53.624535Z"}, {"uuid": "1045716a-95cf-4c68-9bd1-13ba089d6441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:55.852968Z"}, {"uuid": "71d391d1-eb53-40ab-a083-d8f939943b2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:12.223872Z"}, {"uuid": "2f38a1ab-bff5-4e9f-bc85-9b46469a4ba2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:14.440894Z"}, {"uuid": "f9153bfd-0c2c-4c49-be96-27827ab8b56f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:42.134384Z"}, {"uuid": "931c60d2-b033-45bf-bc47-475f4a9299ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:56.418472Z"}, {"uuid": "409c7a0a-febd-4fba-a8dc-a4190b1fdee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:29.288556Z"}, {"uuid": "37db3802-f9bc-4a9e-8819-8dc519760418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:40.971821Z"}, {"uuid": "f86f38d5-853f-41ac-9866-825bcc74e4e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:46.849273Z"}, {"uuid": "882ae86c-3690-4239-a350-d2ded872b3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:19.018994Z"}, {"uuid": "cb88fd62-6728-48e0-b599-233e7c300cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:23.663778Z"}, {"uuid": "205d5cbc-5734-4124-a932-d61acd953617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:37.670540Z"}, {"uuid": "7550712f-442b-4926-92e3-8979b4e95640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:39.901065Z"}, {"uuid": "2546d9a0-4adc-4bed-b7e8-d75fb7de8ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:47.065914Z"}, {"uuid": "ed194131-7d5c-4b6d-9b07-56496f9967a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62463", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfqgtf2ge2e", "content": "CVE-2026-62463 - oracle hyperion infrastructure technology\nA vulnerability in Oracle Hyperion Lifecycle Management (version 11.2.25.0.000) allows an attacker with network access to compromise the system and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:00:04.758250Z"}, {"uuid": "191dd79d-3db2-436d-858d-845d2bf0d029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62512", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfqguv6yq25", "content": "CVE-2026-62512 - siebel crm cloud applications\nA critical vulnerability in Oracle Siebel CRM Cloud Manager allows an attacker to take control of the system by sending a malicious request over the internet.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:00:06.203139Z"}, {"uuid": "f8a5d153-8b0e-42c6-9df0-c2703577833c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:44.453451Z"}, {"uuid": "968cec0b-d9a1-4896-8ff7-fa66c0c95e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62737", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mss6bb5t3q2m", "content": "Windows 11 Kernel Zero-Day CVE-2026-62737: Full Technical Analysis of the NDIS KLoader Proxy,\u2026\n\nhttps://thecybersecguru.com/news/windows-11-kernel-zero-day-cve-2026-62737-full-technical-analysis-of-the-ndis-kloader-proxy-executioncontext-sys-task-queue-and-controlled-kernel-rip/", "creation_timestamp": "2026-08-11T08:14:15.863268Z"}, {"uuid": "4d295a0a-7589-4ea8-a4b6-1a6ba22dc018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:39.995269Z"}, {"uuid": "8fd2c33a-ab34-4515-8d63-caed300956fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:05.527678Z"}, {"uuid": "28572f5e-953b-422c-b5c4-cba43de72708", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:07.752608Z"}, {"uuid": "c2e4dcb6-5ed6-40b8-8b3d-d9f98cdc6a2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:10.089027Z"}, {"uuid": "4e0d996d-9eef-43d8-84d0-650a126243c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:42.238367Z"}, {"uuid": "517a48cf-0f23-43d2-ba8d-d1ce8f0e04f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:00.581762Z"}, {"uuid": "f6b4c4dc-74de-4b87-92f1-5c70055e2f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:09.979209Z"}, {"uuid": "66e6f2d1-072d-4a30-85d2-2b5b26e5bfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:26.704725Z"}, {"uuid": "a089865a-10c7-4d18-aa0c-1a6437c083e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:31.554146Z"}, {"uuid": "ccc70fb7-2069-43bd-90c7-19317eb69f78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:37.567053Z"}, {"uuid": "19d6668d-8509-4338-8498-a7563e5da11e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:44.643010Z"}, {"uuid": "67db581c-0ef1-4f04-9460-8c644f65d81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:17:58.268609Z"}, {"uuid": "1fd52908-c9e4-47ec-9be0-6db382cc7198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:02.835347Z"}, {"uuid": "70c8fdc2-c640-43b6-9c59-33043905f0ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:33.085228Z"}, {"uuid": "5eb3f071-ce28-4a54-ad07-0cbd729f3afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:35.437698Z"}, {"uuid": "749d1cea-b82c-481e-b6d2-26ddb67e6a38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:58.760146Z"}, {"uuid": "46716c39-fd40-4bf0-980f-65e4a8b4a6d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:12.369020Z"}, {"uuid": "672d0756-fb5c-4d87-bee4-c7fbe84394c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:14.592846Z"}, {"uuid": "f5065185-a19c-41f3-8a8e-bad551f488ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/13005", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-08-22T09:00:03.049037Z"}, {"uuid": "f4215602-d4e5-41fe-b415-117b688667c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:05.182209Z"}, {"uuid": "3f127a09-cbff-4bbe-a6ad-9ea367652604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:33.809403Z"}, {"uuid": "6cf29404-5e3b-48e8-baa2-244967f96dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:07.459541Z"}, {"uuid": "8198f185-8178-495e-adc6-50e2aa438476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:28.231729Z"}, {"uuid": "e74f87c7-0d85-468d-8018-7ea7f702076a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:03.295333Z"}, {"uuid": "3d3da3e0-2bb6-4678-9737-a913ac54ac02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt4jrzfoiv2x", "content": "\ud83d\udccc CVE-2026-62819 - Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine https://www.cyberhub.blog/cves/CVE-2026-62819", "creation_timestamp": "2026-08-15T11:07:06.229687Z"}, {"uuid": "2fae1be2-5c37-4bb8-93c7-5587ad0d8468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62539", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfqypiqso2u", "content": "CVE-2026-62539 - oracle hyperion infrastructure technology\nA critical security flaw in Oracle Hyperion Infrastructure Technology version 11.2.25.0.000 allows hackers to gain full control of the system\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:10:04.845664Z"}, {"uuid": "cf68458b-d5c2-4469-8a75-b4e3c0932956", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:16.758536Z"}, {"uuid": "2aab3e86-1522-4515-874a-a246d55357cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:21.313592Z"}, {"uuid": "ba70e33e-63de-4305-947f-10a3cbfc3135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:25.930098Z"}, {"uuid": "51ffc922-4423-4603-9f74-9c1220e98797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:51.530417Z"}, {"uuid": "8002342d-a06b-46b1-8353-693c96a91db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:54.059682Z"}, {"uuid": "90db9dba-cd46-4ccf-a1d0-1d3b63645845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:38.450969Z"}, {"uuid": "6393fbae-0526-4523-918d-573e53bf7c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62541", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfqyqo6zc2p", "content": "CVE-2026-62541 - oracle hyperion infrastructure technology\nA critical flaw in Oracle Hyperion's installation and configuration process allows an attacker with internet access to take control of the system.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:10:05.551803Z"}, {"uuid": "01a3f1fe-cf6b-42b2-b791-96832e6e5de5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/24202", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-08-22T09:00:03.359508Z"}, {"uuid": "c10b09ca-f275-48d9-8b8c-ee4c6a045ec4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:18:49.311496Z"}, {"uuid": "ad3fe083-3817-4632-af0a-230a35ef9978", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:16.946327Z"}, {"uuid": "d115064c-7bdd-4b53-a187-e23881757509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62543", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfrklrqtn2e", "content": "CVE-2026-62543 - oracle hyperion infrastructure technology\nAn attacker can take control of the Oracle Hyperion Infrastructure Technology product by sending a malicious request through the internet. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:20:04.914329Z"}, {"uuid": "fa2c4ef7-0884-4022-af4e-f79d80e15c26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:19.452144Z"}, {"uuid": "4cd30f2b-377d-40f5-82dd-40697a6340b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:21.911060Z"}, {"uuid": "0f56c526-a2a1-404d-9a0a-b867fe5be849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:24.366600Z"}, {"uuid": "4033ae77-a19e-41c0-a35a-c814b74d92dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62915", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:43.297384Z"}, {"uuid": "98dcea8a-3814-4dcb-a7a7-e093ba57a328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:45.575243Z"}, {"uuid": "d6046222-eff3-404b-867a-53ae2e075648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62544", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4h5k2r2t", "content": "CVE-2026-62544 - oracle hyperion infrastructure technology\nAn attacker can gain full control of the Oracle Hyperion system by exploiting a weakness in its installation and configuration settings. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:30:04.773054Z"}, {"uuid": "c450b23a-c72a-4055-85ca-58b31fca7c62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=2009", "content": "", "creation_timestamp": "2026-08-13T10:19:36.083432Z"}, {"uuid": "7f3ef97d-e6b8-4dc8-8bd4-e46dfd7c42f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62582", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfs4ihl4225", "content": "CVE-2026-62582 - oracle hyperion calculation manager\nThe Oracle Hyperion Calculation Manager software in version 11.2.25.0.000 has a security flaw that allows an attacker to access sensitive data without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:30:05.348036Z"}, {"uuid": "41e58e88-7751-4b27-9b5c-16f79d2c628a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62585", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfsodtig22j", "content": "CVE-2026-62585 - siebel crm administration\nAn attacker can take control of your Oracle Siebel CRM Data Archival tool without needing a password. This can happen if an attacker has access to your company's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:40:04.245262Z"}, {"uuid": "315880c1-a01f-4b2b-871e-adc5e126f0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62588", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfsof32zy2f", "content": "CVE-2026-62588 - siebel crm integration\nOracle Siebel CRM versions 25.12 to 26.6 have a security flaw that allows an attacker with network access to take control of the integration product. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:40:14.113670Z"}, {"uuid": "e54f4bcb-f1a5-4f8a-9348-e4635f4e4ee1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62592", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfta7uffk2e", "content": "CVE-2026-62592 - siebel crm integration\nA security issue in Oracle Siebel CRM's Open Integration component allows an attacker with network access to potentially take control of the system. This affects\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:50:04.407955Z"}, {"uuid": "7fde29bf-422a-4dc6-aa1c-56e1f95540bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62608", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtftab4w5j2f", "content": "CVE-2026-62608 - oracle reports developer\nA security flaw in Oracle Reports Developer on Oracle Fusion Middleware 12.2.1.19.0 allows an attacker with network access to take control of the system. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T03:50:05.381591Z"}, {"uuid": "c4dbf44d-7d95-48c2-8be8-8f186ab00f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62610", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfts6qykv23", "content": "CVE-2026-62610 - oracle reports developer\nOracle Fusion Middleware Reports Developer version 12.2.1.19.0 allows an attacker to access sensitive data without authentication. This is a serious issue because\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:00:06.759039Z"}, {"uuid": "df60017e-a4e4-45f7-b9c0-b3f24821a53a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62609", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfts5eabt2p", "content": "CVE-2026-62609 - oracle reports developer\nA security flaw in Oracle Fusion Middleware's Reports Developer product, version 12.2.1.19.0, allows an attacker to remotely take control of the system without\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:00:05.323667Z"}, {"uuid": "e801016c-ae7d-4ad4-b4f1-2c42facd1d42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mt4njbegy32k", "content": "CVE-2026-62837 - Path traversal info disclosure in Microsoft Office SharePoint. CVSS 6.5. Patch under review. Monitor advisories and restrict access. #CVE #Microsoft #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62837/", "creation_timestamp": "2026-08-15T12:13:47.786626Z"}, {"uuid": "02a886d4-8204-4fe7-9468-b9df0d8218fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62611", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfudybtdj24", "content": "CVE-2026-62611 - oracle reports developer\nA security risk exists in Oracle Fusion Middleware's Reports Developer, which allows an attacker without a login to take control of the software. This risk is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:10:04.372515Z"}, {"uuid": "71ebb206-725b-463e-9bf0-e1b3324eecae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62613", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfudzqiv72u", "content": "CVE-2026-62613 - oracle reports developer\nOracle Reports Developer version 12.2.1.19.0 has a security weakness that makes it easy for an attacker to access sensitive data without a password. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:10:05.482986Z"}, {"uuid": "fe5501bb-750e-452d-b96a-de9be3a1af19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117099464444423464", "content": "CVE-2026-62837 - Path traversal info disclosure in Microsoft Office SharePoint. CVSS 6.5. Patch under review. Monitor advisories and restrict access. #CVE #Microsoft #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62837/", "creation_timestamp": "2026-08-15T12:13:49.542989Z"}, {"uuid": "b83b4d98-8769-40b5-b5bd-fdd0c7f3e0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62614", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfuvudu4q2e", "content": "CVE-2026-62614 - oracle reports developer\nA security flaw in Oracle Reports Developer 12.2.1.19.0 allows unauthorized users to access and control the software. This is a serious issue, as it could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:20:04.761865Z"}, {"uuid": "4d566c73-3e43-4046-ad4f-ec1b2ddd3766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62617", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfuvvm3f72t", "content": "CVE-2026-62617 - oracle reports developer\nThe Oracle Fusion Middleware Reports Developer software has a security weakness that allows hackers to gain control of the system without a password. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:20:05.569721Z"}, {"uuid": "0fa8bf31-a60d-4299-9b07-a05b66b2250e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62618", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfvhqajce2p", "content": "CVE-2026-62618 - oracle reports developer\nThe Oracle Fusion Middleware Reports Developer version 12.2.1.19.0 has a security flaw that allows attackers to access sensitive data without a password. This means\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:30:04.508898Z"}, {"uuid": "c13832ae-1083-40e8-8b5e-a79fa7456346", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62622", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfvzmzvrn2p", "content": "CVE-2026-62622 - oracle reports developer\nA critical flaw in Oracle Fusion Middleware Reports Developer (version 12.2.1.19.0) allows hackers to take control of the system without a password. This puts\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:40:04.411439Z"}, {"uuid": "86c4f933-5569-4d12-9846-2c49a077848b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62621", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfvhrlama25", "content": "CVE-2026-62621 - oracle reports developer\nOracle Reports Developer, a tool used for creating reports, has a security weakness in its authentication system. This means an attacker with access to the network\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:30:05.100883Z"}, {"uuid": "80a6633c-c8fc-420f-80c5-21c6cabf5b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62624", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfvzoivva23", "content": "CVE-2026-62624 - oracle reports developer\nOracle Reports Developer version 12.2.1.19.0 has a security flaw that allows hackers with network access to take control of the system without needing a password.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:40:05.668470Z"}, {"uuid": "74cd42c5-0591-44ac-a6e4-a3d630c88135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62682", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthumdxfun2y", "content": "CVE-2026-62682 - orval\nOrval's generated JavaScript clients can execute attacker-controlled code if a malicious OpenAPI specification contains an unescaped backtick in the URL. This affects developers, CI/CD\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:20:04.391972Z"}, {"uuid": "108025c7-008d-49f0-b5fb-4640bbbe8a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62283", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmxujcorz2t", "content": "\ud83d\udd34 CVE-2026-62283 - Critical (9.9)\n\nNezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. N...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62283/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T00:01:39.026393Z"}, {"uuid": "fd163e23-f0b8-40d6-80f6-1c2e47b3b289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtdaehzjhx24", "content": "\ud83d\udccc CVE-2026-62878 - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62878", "creation_timestamp": "2026-08-18T03:07:08.156682Z"}, {"uuid": "c8682a42-8ac9-4747-9063-0cf468ab70a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mthwbzkmpm2u", "content": "CVE-2026-62681 - orval\nOrval, a tool for generating TypeScript clients, has a bug that allows attackers to inject malicious code into generated JavaScript. This could lead to code execution on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#orval #orvallabs #CVE #infosec", "creation_timestamp": "2026-08-19T23:50:05.464655Z"}, {"uuid": "bb187efa-322a-4ab5-bcba-79c17f35bcb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62727", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117129727604889615", "content": "We have just added an important vulnerability affecting Microsoft Windows (CVE-2026-62727) https://vuldb.com/vuln/393440", "creation_timestamp": "2026-08-20T20:30:06.959913Z"}, {"uuid": "39caba50-ecdd-4833-960e-1b0510832893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzeaus7427", "content": "\ud83d\udd34 CVE-2026-62867 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62867/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:01:00.369384Z"}, {"uuid": "9c64ac13-8a1c-41cf-b5db-42e142f393ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5he653y25", "content": "\ud83d\udea8 CVE-2026-62940 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating an instance...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62940\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:59.506576Z"}, {"uuid": "562bfa84-6fcf-4291-bf0b-6fffd322d4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62626", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfwljbyl32e", "content": "CVE-2026-62626 - oracle reports developer\nA security flaw in Oracle Reports Developer, a tool used for creating reports, allows an attacker to gain control of the system without needing a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:50:04.338376Z"}, {"uuid": "8f7a3869-afeb-439e-b5bc-22d6b8d8611d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62867", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5gztobb2f", "content": "\ud83d\udea8 CVE-2026-62867 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, improper validation of use...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62867\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:08:48.284145Z"}, {"uuid": "256b34c1-36e8-4716-b988-bef2e13e87a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62941", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtm5hmwign25", "content": "\ud83d\udea8 CVE-2026-62941 \u2014 CVSS 9.9 CRITICAL\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when copying an instance a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62941\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T16:09:08.254279Z"}, {"uuid": "888a9d9e-b7f4-4c73-859e-f03e6c83187d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62629", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfwlki3662m", "content": "CVE-2026-62629 - oracle reports developer\nAn attacker can access or modify sensitive data in Oracle Reports Developer without permission, and even cause the program to crash. This affects version 14.1.2.0.0\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T04:50:05.722923Z"}, {"uuid": "e330db85-a4cd-445e-94f3-18392644d4a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62630", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfx5glueb2c", "content": "CVE-2026-62630 - oracle reports developer\nAn attacker with network access can take control of Oracle Reports Developer, which is a tool used for creating reports in Oracle Fusion Middleware. This is a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:00:05.480901Z"}, {"uuid": "65fb2a1c-1fea-47b6-969e-3e43a6f91b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62632", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfx5hs7pc25", "content": "CVE-2026-62632 - oracle reports developer\nThe Oracle Reports Developer product in Oracle Fusion Middleware has a security flaw that allows an attacker to take control of the system without a password. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:00:06.768653Z"}, {"uuid": "517d56f8-c3ba-4134-a2e0-5e06cdfd3612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62633", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfxpboq2t25", "content": "CVE-2026-62633 - oracle reports developer\nA critical security flaw in Oracle Reports Developer (version 14.1.2.0.0) allows hackers to take control of the system without a password. This is a serious issue\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:10:04.539090Z"}, {"uuid": "89cc4ddc-01a4-41f5-abfe-a8bff3713b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62634", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfxpd6lpk2u", "content": "CVE-2026-62634 - oracle reports developer\nOracle Reports Developer, a part of Oracle Fusion Middleware, is at risk of being taken over by an attacker with network access. This could happen if an attacker\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:10:06.319824Z"}, {"uuid": "cfac32cb-7808-4e2d-9579-3637795e2f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62635", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb5v3xv2b", "content": "CVE-2026-62635 - oracle reports developer\nA security weakness in Oracle Fusion Middleware's Reports Developer allows an attacker to take control of the system without a password. This means an attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:20:04.514129Z"}, {"uuid": "8177bdaa-b1a0-4fd0-9885-773ac4f39a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62637", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfyb77ug323", "content": "CVE-2026-62637 - oracle reports developer\nThe Oracle Fusion Middleware Reports Developer software allows unauthorized access to sensitive data if an attacker has direct access to the computer where the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:20:06.171095Z"}, {"uuid": "a4207287-5672-46c3-abac-668152c416c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62638", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfyszyjlt25", "content": "CVE-2026-62638 - oracle reports developer\nThe Oracle Fusion Middleware Reports Developer product has a security issue that could allow hackers to access sensitive data without a password. This means that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:30:04.208293Z"}, {"uuid": "69cf312d-858d-4168-8dd6-92f1e7806d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62639", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfyt3gurt2e", "content": "CVE-2026-62639 - oracle reports developer\nThe Oracle Reports Developer software, part of Oracle Fusion Middleware, has a security flaw that allows an attacker to take control of the system without a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:30:05.542462Z"}, {"uuid": "062fb8d2-298e-4ada-9923-94e1a4e43e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62640", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtfzevzdgs2t", "content": "CVE-2026-62640 - oracle reports developer\nThe Oracle Reports Developer software on Oracle Fusion Middleware 14.1.2.0.0 has a security weakness that makes it easy for an attacker to take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclecorporation #CVE #infosec", "creation_timestamp": "2026-08-19T05:40:03.901866Z"}, {"uuid": "2d712fe2-6cc3-46ae-9f12-12a3d28ce234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62940", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnzehjy5i2r", "content": "\ud83d\udd34 CVE-2026-62940 - Critical (9.9)\n\nIncus is a system container and virtual machine manager. Prior to version 7.3.0, when migrating a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62940/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T10:01:07.481302Z"}, {"uuid": "e09afc0b-0b3b-464e-b27d-e63f15d70f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://t.me/bdufstecru/3393", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c \u0440\u0430\u0437\u044b\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-11889\nCVE-2026-62737\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62737", "creation_timestamp": "2026-08-20T00:00:28.267665Z"}, {"uuid": "d36269a6-a334-43da-b1b6-6cd6be069029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mt55vr47732x", "content": "\ud83d\udccc CVE-2026-62784 - Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network. https://www.cyberhub.blog/cves/CVE-2026-62784", "creation_timestamp": "2026-08-15T17:07:06.571088Z"}, {"uuid": "5cc42617-8a6a-469c-a428-4ce5d2154f89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62681", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mthxw36wcp23", "content": "Orval Turns Your Build Pipeline Into a Malicious Code Factory\nPANIC 74% | Lag 0.0h | CVE-2026-62681 affects Orval, where crafted OpenAPI input can inject malicious JavaScript into gener\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-20T00:19:11.888034Z"}, {"uuid": "4f5a702b-841b-406e-aa9f-de4e67cfc8d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62283", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtn23zr3ow23", "content": "Critical Monitoring Hole, Because Apparently Sleeping Is a Security Strategy\nPANIC 92% | Lag 0.0h | CVE-2026-62283 is reported as a critical vulnerability in Nezha Monitoring, with a CVSS score of 9.9\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-22T00:41:37.835635Z"}, {"uuid": "8b1c6c67-5985-452e-b088-d641ec3a3909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62834", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtkctqmxql2j", "content": "CVE-2026-62834 - azure data factory\nAzure Data Factory may not properly verify a security check, which could let an unauthorized person raise their permission level on the service. This could allow them to view or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-20T22:40:04.319447Z"}, {"uuid": "01348e3f-b7d1-48c8-963b-adf489e62462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mst6gv5bm42q", "content": "CVE-2026-62815 - windows 11 version 23h2\nMicrosoft's QUIC protocol is affected, which can be exploited by attackers to run malicious code on vulnerable systems. This could lead to unauthorized access and data\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-11T17:50:04.066638Z"}, {"uuid": "277941c5-a632-44ef-9f28-2c01617a1822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6280", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq55wi3vpt2l", "content": "CVE-2026-6280 - Improper Access Control in Nomysoft Informatics' Nomysem\nCVE ID : CVE-2026-6280\n \n Published : July 8, 2026, 9:16 a.m. | 2\u00a0hours, 32\u00a0minutes ago\n \n Description : Exposure of sensitive information due to incompatible policies vulnerability in NOMYSOFT Informatic...", "creation_timestamp": "2026-07-08T12:51:55.676294Z"}, {"uuid": "94253ccf-d9e0-485d-81e5-5c73d31db3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62316", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtn35wvkv422", "content": "\ud83d\udfe0 CVE-2026-62316 - High (8.8)\n\nMicrosoft UFO open-source framework for intelligent automation across devices and platforms. Prio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62316/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T01:00:36.663969Z"}, {"uuid": "9aad2813-655c-4049-8256-409ca8eb2121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117078281429108900", "content": "There is a new vulnerability with elevated criticality in Microsoft Windows (CVE-2026-62692) https://vuldb.com/vuln/388321", "creation_timestamp": "2026-08-11T18:26:40.694470Z"}, {"uuid": "a77b9486-04d7-44e0-8af5-535b7ced8d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstbacarrp2u", "content": "CVE-2026-62878 - windows 10 version 1607\nAn attacker can execute malicious code on your DNS server if they gain access to it. This is a serious concern because an attacker could then access and control your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-11T18:40:03.879717Z"}, {"uuid": "b435f1bf-8c3e-4610-94a1-54d25c5c9603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mstbadnmuk25", "content": "CVE-2026-62893 - windows 10 version 1607\nAn attacker can execute malicious code on a Windows Deployment Services server, potentially taking control of the server. This could allow the attacker to access sensitive\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-08-11T18:40:05.270287Z"}, {"uuid": "052292e6-002a-4cf0-8ed8-0bc9cb62766a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:51.751329Z"}, {"uuid": "0281f1e2-f037-47aa-961f-376f79e3e5d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:53.597127Z"}, {"uuid": "bf4d2daf-6e0a-4faa-8060-3fc97c81cc07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62913", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:07.021146Z"}, {"uuid": "d38f29d1-a577-4194-96a0-39570e094e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:19.082666Z"}, {"uuid": "b2c5ffa8-eed1-4dfa-9e7e-3717fb1821ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msheas63f42z", "content": "CVE-2026-62896\nAn attacker with authorized access to Microsoft Teams can gain higher-level network access than intended. This allows them to potentially access sensitive data or perform unauthorized actions. Microsoft has\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-07T01:02:04.761733Z"}, {"uuid": "1345e2a1-1d7d-421f-ae41-c68db1511fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:38.321835Z"}, {"uuid": "7eb5f292-0b6a-401f-af73-4cdad9c0a47f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:38.087870Z"}, {"uuid": "a673636e-e83e-44b9-9c17-f2fad5f2910c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:38.971946Z"}, {"uuid": "e53b3579-48ce-4b4a-88c9-5a9c7c08e855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:38.573643Z"}, {"uuid": "5e0ea650-f28b-42e2-ba99-6932033d6268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:40.132486Z"}, {"uuid": "04c86ab2-4f71-4052-ad45-ed00429608b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:50.930826Z"}, {"uuid": "130fd0f2-1ba8-48bb-84a2-3be7d17dc265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:52.447656Z"}, {"uuid": "2d669edf-c843-467c-b1c2-5e0da7ad1b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:56.959052Z"}, {"uuid": "92d7e68c-3b33-42d1-8c32-1de8fb89d505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62912", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:06.373795Z"}, {"uuid": "84168d39-6b7a-4878-b316-84570f2c0c34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62910", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:06.604735Z"}, {"uuid": "937dbcb8-065a-4832-b419-43d95a0b8f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:08.327452Z"}, {"uuid": "9ed121d0-5752-4a77-96a5-1b386d3c1a71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:39.195966Z"}, {"uuid": "dd3d8b0d-acc1-4546-9e1c-d74b7ff23dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:41.176686Z"}, {"uuid": "246cf13c-536f-4825-b1db-8ce9b0bee3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:41.584032Z"}, {"uuid": "26c4ab9a-72dc-46f4-9ee6-04d8399cad25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:50.111351Z"}, {"uuid": "1845bfb1-07c6-40e7-802d-bbe2afe2b3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:50.285431Z"}, {"uuid": "8dd0203e-7a9f-42bf-a508-4fffadce065e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:55.669970Z"}, {"uuid": "f6c3e329-be12-4205-bb3d-c275d0a275c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:41.350138Z"}, {"uuid": "a64e89ce-856e-4ab3-9efe-00669b93302f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:51.984837Z"}, {"uuid": "1a0e27f1-7485-4284-b034-9784b3da9f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:53.381250Z"}, {"uuid": "4ae76796-d0b1-4aaf-b796-8fc8bf2a1951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:59.781705Z"}, {"uuid": "c85ca4ea-31a3-43a0-8a51-78d8d03428b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:26.376524Z"}, {"uuid": "ca9609ea-fb16-4ebb-87a4-a94f572ad09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:29.016001Z"}, {"uuid": "fb1740e7-536a-4196-a992-83f730d2319c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:33.607131Z"}, {"uuid": "c5a140ff-e566-4118-94bc-8d80de83fd1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:35.043929Z"}, {"uuid": "dd35a532-c0a7-4773-97ea-73e7efdcf80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:36.409981Z"}, {"uuid": "f6a4786d-e366-4746-b7a1-0e9b08b3c95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:43.802588Z"}, {"uuid": "42ba580d-55bf-4659-8a30-d25c3568db70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:44.740796Z"}, {"uuid": "b79ddf23-1d13-4712-aac8-eb7f439dd7a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:44.957893Z"}, {"uuid": "46961f61-0c80-4f92-b73c-e9586b4f998b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:53.081674Z"}, {"uuid": "52f1a3b4-170e-4fab-b570-3d980e082fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:53.297901Z"}, {"uuid": "b619c795-ba53-477a-9f4e-9af9f2bfbec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msheab5dm32t", "content": "\ud83d\udd34 CVE-2026-62873 - Critical (9.8)\n\nImproper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthor...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62873/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T01:01:47.698517Z"}, {"uuid": "0b2a40a1-d1ec-4831-8ccf-86f3c700ba0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msheahnqgq2z", "content": "\ud83d\udd34 CVE-2026-62896 - Critical (9.6)\n\nImproper authentication in Microsoft Teams allows an authorized attacker to elevate privileges ov...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62896/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T01:01:55.102592Z"}, {"uuid": "19877ecf-4042-4b16-840e-a067e618e1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:48.871533Z"}, {"uuid": "1d4615e9-0b30-4695-92c6-fe43ef87d17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:49.285005Z"}, {"uuid": "f833fcad-718c-4804-86cf-716fccb3e0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:49.886358Z"}, {"uuid": "ec18fe2f-f21f-40fd-beda-8404b3523d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:51.582667Z"}, {"uuid": "95f16f93-62f4-4adc-9ef5-e74664802b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:54.707125Z"}, {"uuid": "4c350b74-6d71-41d9-90e6-15255bad22ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:16.711305Z"}, {"uuid": "ed54b828-802c-4f3b-86d7-a045c8943880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:18.861809Z"}, {"uuid": "b2e98464-4f6d-4ffa-a2df-8ccfe1c23f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:48.407753Z"}, {"uuid": "0b893bb8-0a6c-4308-9df7-4c019366b811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:52.895415Z"}, {"uuid": "e2e416a3-6108-490f-9a2c-8ea0ef329d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:53.213294Z"}, {"uuid": "e3ba97ef-a0a5-44b7-a453-44d8d4eced44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:54.045593Z"}, {"uuid": "a4bfbf51-424f-4466-8e60-e7f0c3354955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:54.265723Z"}, {"uuid": "af73872c-46d2-41e3-bb4e-a70d600b88b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:54.467994Z"}, {"uuid": "7f5ab68e-37de-4460-b5d5-8f94a91ab184", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:47.496230Z"}, {"uuid": "34c08c14-7053-46a7-84f3-efab942fae83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:50.699882Z"}, {"uuid": "b5430595-9f34-4c61-be5d-f454e6e90f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:00:49.100969Z"}, {"uuid": "b07e047f-1637-46c1-a4fd-067c14981192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:18.652476Z"}, {"uuid": "fa9b1bab-de0f-4dad-af3a-b5b703eee4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:32.714389Z"}, {"uuid": "5b5649e4-97f1-4131-857c-1fa8300bf31d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:32.932662Z"}, {"uuid": "3e72e4a0-3a39-4ab6-87ed-673188fc490c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:34.814235Z"}, {"uuid": "5854bd2d-7db9-4815-924a-d936d4c7d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:35.449399Z"}, {"uuid": "056ceec7-7090-4f2e-aba5-360731b5dece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:40.975221Z"}, {"uuid": "1a02dba9-a366-4ddc-83e6-293e7be7abb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:41.600417Z"}, {"uuid": "9c0b7d87-3361-43da-8d68-48695c03fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:28.783112Z"}, {"uuid": "537b4845-baab-4aaa-be3b-765c0f82897c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:35.784980Z"}, {"uuid": "1a4f7068-8e82-4b1f-9891-2f8fb5574fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:36.002662Z"}, {"uuid": "52161b0d-2cd8-42e7-a4d6-84cbd1579e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:36.166340Z"}, {"uuid": "d80b9f14-065a-4f3b-94fc-fcd469199caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:37.309966Z"}, {"uuid": "3be070a3-a858-4136-a7a2-a98ee805d472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:37.722134Z"}, {"uuid": "86298887-e30a-4cdb-bbdd-cb6a7880017f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:37.898209Z"}, {"uuid": "579f9c09-25b7-48bc-b3b6-fb81824f2516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:38.294711Z"}, {"uuid": "fd8cf873-c3fe-4a7b-b9a8-06e67603d7c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:40.567601Z"}, {"uuid": "61a238d2-2c40-465e-8483-12bdb962bd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:44.521879Z"}, {"uuid": "f4239eaf-ae01-4e69-99bf-c20dcd48e0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:49.069797Z"}, {"uuid": "b4b4cce2-416e-45ce-8d5d-23122ddefb24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:31.702630Z"}, {"uuid": "4da7e590-d465-48e1-9e95-6fb0d8a511ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:32.324466Z"}, {"uuid": "02106d75-7525-48dd-a8a6-189afb1ba7fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:37.502080Z"}, {"uuid": "ada36dd9-4c7f-4a96-99f7-cb65af63c391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:42.864779Z"}, {"uuid": "0c0cb77b-cf52-4be6-a953-a140cc4bb271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:43.022900Z"}, {"uuid": "51a2e517-ff49-470b-96e0-e101aa3b1ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:00.963765Z"}, {"uuid": "48317e12-2a90-423b-9c0a-c563b2567236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:04.536454Z"}, {"uuid": "c1c937b4-4243-483d-8e3b-aea7427c9d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62915", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:07.219484Z"}, {"uuid": "56a90d85-73d7-415b-ad21-0122acfa3881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62914", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:07.443042Z"}, {"uuid": "211c50b6-3fd3-484c-994d-e3759d21ce19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:58.876940Z"}, {"uuid": "0f95b9d3-0127-4d91-b69e-8717d33a35c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:03.463848Z"}, {"uuid": "4ebec605-2dbd-4955-99c7-b146c899020f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:07.894491Z"}, {"uuid": "8efabebb-87e8-4919-8a75-4d3b32e5e178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:54.293282Z"}, {"uuid": "b2650a53-4df9-4ee1-8ceb-fa9351ccb530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:54.506704Z"}, {"uuid": "98ac1a6a-4b82-4f5f-b070-10331fd6e42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:54.721385Z"}, {"uuid": "61d67266-e0a4-4b3c-8fed-b2859a2e92f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:55.147972Z"}, {"uuid": "e496a077-f823-491c-9109-2e46f616654e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:59.753264Z"}, {"uuid": "6d56ab5d-3b8a-4d37-ada0-87f0356f36f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:04.768291Z"}, {"uuid": "0f32c3a0-af44-4b2a-b349-98eaab44e16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:14.585859Z"}, {"uuid": "6b983a46-f5ab-4a52-b70a-31578eb1d58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:52.214366Z"}, {"uuid": "3d2eb877-5c3f-45df-a703-09a0d279f775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:59.970365Z"}, {"uuid": "89b0b34a-1a7a-47a0-a282-2dc3c672064e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:01.345277Z"}, {"uuid": "e52cc211-985f-4333-9270-583597027260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:01.992139Z"}, {"uuid": "6e8a7be7-0b22-4995-8e41-f99e0117d347", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:02.200219Z"}, {"uuid": "cff3a0e5-2180-4877-9f83-dea8624e21d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:06.412899Z"}, {"uuid": "84844ca9-3cc4-4d79-b26f-0abbe6ebc9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:41.144031Z"}, {"uuid": "16fe7eda-0931-4681-8dd4-97927bb8cdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:56.403783Z"}, {"uuid": "434601ef-3cf5-405c-a46a-8a15b6b6cada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:56.825408Z"}, {"uuid": "e28ef23d-b138-45ff-8ac8-0af3cd8244de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:03.898969Z"}, {"uuid": "2c503ecf-09f9-41a9-be37-ae7a1095efca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:05.184068Z"}, {"uuid": "3d024e25-403f-4b1c-8bac-41532cc31011", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:05.566333Z"}, {"uuid": "1bbe5235-c715-4509-b5e8-9891082a5bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:28.621021Z"}, {"uuid": "7bf759d4-a2cd-4d7c-92dc-c50754eae08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:29.231930Z"}, {"uuid": "c1e2c0b7-19c9-4f57-97b2-276715db497d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:32.546843Z"}, {"uuid": "6a21850e-a0c5-477b-a774-c80e12ea2f6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:33.149532Z"}, {"uuid": "97f891b7-5253-4c8f-abbc-46c068d15696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:38.713223Z"}, {"uuid": "8dbc0d10-4970-43c4-b048-8ec7bf26c09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:43.404986Z"}, {"uuid": "b68b2a4e-3f6e-4ee6-a2d0-3b965c43a00d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:49.729357Z"}, {"uuid": "53113e2a-ed1c-4d29-9c75-dd27555d2189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:51.224894Z"}, {"uuid": "08661c78-0027-48e3-a9a0-5b84bc727cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:52.875001Z"}, {"uuid": "f5fb3a66-baee-4883-8bc7-b4f3b6674ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:55.443104Z"}, {"uuid": "ea176359-c3cd-4b70-8764-072ccf443955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:57.050306Z"}, {"uuid": "37934c1b-6040-4e2f-bb11-6dc7b7e3c12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:34.217584Z"}, {"uuid": "4f5514ba-a783-4b7d-b615-a6248c669205", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:34.435974Z"}, {"uuid": "123a4da4-32a2-4b38-9eef-6eb2003f3e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:35.614403Z"}, {"uuid": "1fb1bcca-f08d-4af5-b46f-0f9cf41fdaec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:36.869421Z"}, {"uuid": "7c60ada4-9640-4f47-9477-f2f596e68b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:38.935372Z"}, {"uuid": "a4d231f4-d6a0-4684-aeec-f15db1a53483", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:45.127516Z"}, {"uuid": "03a42688-cca2-453d-9e7a-c50e9f94e0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:48.854384Z"}, {"uuid": "dfdcc426-a041-4025-b4f7-930b4896a68e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:49.950874Z"}, {"uuid": "e545678d-2236-4910-897f-4c46386c940f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:50.174762Z"}, {"uuid": "73acde0e-cf2d-49cf-bfec-ffca2915d3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:50.323639Z"}, {"uuid": "79dc3452-17c7-42e8-b984-ad21585e09b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:51.451792Z"}, {"uuid": "7c46ee68-85e7-43ea-877a-6dc42e007cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:59.097253Z"}, {"uuid": "607373a5-f217-422f-ad9f-f3e385422817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:03.680711Z"}, {"uuid": "fe01fba7-2b57-4d54-a610-1229733886d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:33.386095Z"}, {"uuid": "3bd3ce8f-f59c-4f90-b381-1f259c3c843a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:36.637625Z"}, {"uuid": "9b163c31-5f9d-4aba-a614-0a8c1c4b5a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:37.095068Z"}, {"uuid": "68ed2e41-1d3b-4793-8426-4cd7571bcf9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:38.479014Z"}, {"uuid": "c0762562-ef59-45f6-8c69-8232d6a73d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:48.476729Z"}, {"uuid": "d561788c-e1ef-4695-ae8d-36be954c8354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:48.689357Z"}, {"uuid": "2eccf62e-963e-426f-86b9-fe10417b987b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:50.568722Z"}, {"uuid": "0ca68547-2ae8-4f63-bf2b-732603ae0199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:50.997379Z"}, {"uuid": "6908e482-37a1-471a-b09b-fa88c581ba07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:51.874036Z"}, {"uuid": "ba4096f6-4584-4a75-8b34-6c2d562cc9f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:58.661426Z"}, {"uuid": "6e162d92-4c31-4b4c-ad71-95adbc20dc83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:44.346287Z"}, {"uuid": "ef745a94-2b74-4e2e-823b-f90e419b3353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:45.590888Z"}, {"uuid": "1d20bb09-919e-477e-850e-99f5ca6b3590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:46.690927Z"}, {"uuid": "4665d1af-17ae-4154-88a2-2abae9ee5fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:52.422470Z"}, {"uuid": "e0dca80d-a71d-4c5e-80ff-d8b4252593e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:55.655216Z"}, {"uuid": "88fb045f-3208-458f-a4a4-a9d7978c8599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:00.295517Z"}, {"uuid": "1344487c-4a6f-49c0-80da-75f4d5f5c3d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:56.256435Z"}, {"uuid": "7d5ceddb-663e-4b87-98f9-0dd6e5216abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:03.025803Z"}, {"uuid": "1090cd49-791b-4c5f-a3bf-0fab2ad7343c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:04.323504Z"}, {"uuid": "e055c623-0eab-412b-82cf-4c46f482168b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:05.413526Z"}, {"uuid": "ff0707e0-88a4-4c1e-842b-3f6a6c92e892", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:56.618312Z"}, {"uuid": "f225b251-62f7-4c0f-a777-e82534ee8485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:01:59.504068Z"}, {"uuid": "96bdaabe-3d37-42bc-a2d3-c7b78b0923e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:03.244132Z"}, {"uuid": "2a566fcb-ab70-4c74-9ccc-b72f51fe08cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhj5yiq42p", "content": "\ud83d\udfe0 CVE-2026-62918 - High (7.5)\n\nImproper verification of cryptographic signature in Microsoft Teams allows an unauthorized attack...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62918/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T02:00:27.734811Z"}, {"uuid": "68b792ed-564e-4549-9497-956337f52f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:00.488124Z"}, {"uuid": "2dc35823-edaa-40d1-b052-9b9f042b5fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:02.365151Z"}, {"uuid": "253962a1-a0be-481a-b901-4e7d25544275", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:02.585285Z"}, {"uuid": "3d0fddca-74a8-4a33-b8e3-0c79f3ddf981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:02.809496Z"}, {"uuid": "0b42784a-1a21-457a-81a7-0e751a79f212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-11T19:02:04.956637Z"}, {"uuid": "b798d0f9-5ef7-4e99-b5b0-cea2310ebdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mshhjldhws2z", "content": "\ud83d\udd34 CVE-2026-62830 - Critical (9.9)\n\nMissing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62830/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-07T02:00:41.798107Z"}, {"uuid": "95bca4f9-0f31-4678-921e-cf3e226d1861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mstcnzik6k22", "content": "Microsoft released patches for 421 CVEs, including exploited zero-days CVE-2026-68820 and CVE-2026-62832 enabling local privilege escalation without user interaction.\n", "creation_timestamp": "2026-08-11T19:05:38.833939Z"}, {"uuid": "b49eefa5-ff52-4a98-8732-01b6dbe76f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/SAqdp9bHH88ksxYx8tSwP5q461mBwCPpE6VU5oVsthx6anc", "content": "", "creation_timestamp": "2026-08-16T00:00:21.635900Z"}, {"uuid": "6c31a018-9337-4bf2-a1c5-6ba0f02797ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62873", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117051990119645465", "content": "CVE-2026-62873 (CRITICAL, CVSS 9.8) affects Microsoft 365 Admin Center: Improper cryptographic signature checks allow privilege escalation over the network. Microsoft has issued a fix \u2014 confirm your environment is patched. https://radar.offseq.com/threat/cve-2026-62873-cwe-347-improper-verification-of-cryptographic-signature-in-microsoft-microsoft-365-5fad3518811d36c2 #OffSeq #Microsoft365 #Vuln", "creation_timestamp": "2026-08-07T03:00:29.979467Z"}, {"uuid": "87ba2166-1cb4-47a0-ab22-cc2804f42356", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mstdhh7hdu2r", "content": "\ud83e\udd16 Microsoft Aug 2026 Patch Tuesday: 400 flaws, 3 zero-days. Exploited in the wild: CVE-2026-68820 (AFD.sys EoP \u2192 SYSTEM), used by Lazarus. Also: LegacyHive CVE-2026-62832.\nhttps://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/", "creation_timestamp": "2026-08-11T19:19:51.525619Z"}, {"uuid": "55e2a391-fec1-4e4b-91d1-b468fd077ae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://gist.github.com/alon710/c26d8ea35790aa5f894c5093fc4e7295", "content": "# CVE-2026-62886: CVE-2026-62886: .NET Elevation of Privilege Vulnerability via Native Heap Buffer Overflow\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62886\n\n## Summary\nAn integer overflow or wraparound vulnerability (CWE-190) in the native layer of the .NET runtime allows local unauthenticated attackers to corrupt the native heap, leading to a heap-based buffer overflow (CWE-122) and local privilege escalation.\n\n## TL;DR\nAn integer overflow in the native memory allocation logic of the .NET runtime allows a local attacker to trigger a heap-based buffer overflow, leading to local privilege elevation via crafted application inputs.\n\n## Technical Details\n\n- **CWE ID**: CWE-190, CWE-122\n- **Attack Vector**: Local (AV:L)\n- **CVSS Severity**: 7.8 (High)\n- **Exploit Status**: None\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- .NET 10.0 Runtime and SDK\n- .NET 9.0 Runtime and SDK\n- .NET 8.0 Runtime and SDK\n- Microsoft Visual Studio 2022\n- Microsoft Visual Studio 2026\n- **.NET 10.0**: >= 10.0.0 and < 10.0.11 (Fixed in: `10.0.11`)\n- **.NET 9.0**: >= 9.0.0 and < 9.0.19 (Fixed in: `9.0.19`)\n- **.NET 8.0**: >= 8.0.0 and < 8.0.30 (Fixed in: `8.0.30`)\n\n## Mitigation\n\n- Update .NET runtimes and SDKs to patched releases\n- Apply least-privilege principles to .NET services and tools\n- Enforce execution control policies on endpoints to prevent untrusted .NET binaries from running\n\n**Remediation Steps:**\n1. Identify all systems running vulnerable versions of .NET and Visual Studio.\n2. Deploy updates for .NET 8.0, 9.0, and 10.0 runtime packages.\n3. Rebuild and redeploy applications bundling custom native dependencies with bounds-checking enabled.\n\n## References\n\n- [Microsoft Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62886)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-62886)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62886) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T19:33:56.588720Z"}, {"uuid": "72a50ef3-69e4-4faa-9b1a-1fb9b5c7eec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97618", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0p5cur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 18:51:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061's poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T20:00:04.341294Z"}, {"uuid": "b84e3194-3673-4836-b5f1-182f9e8f5ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqcxys6jxz2k", "content": "CVE-2026-6212 - IDOR in Teracity's TeraMIS\nCVE ID : CVE-2026-6212\n \n Published : July 10, 2026, 7:17 p.m. | 31\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in Teracity Software Technologies Inc. TeraMIS allows Privilege Abuse.\n\nTh...", "creation_timestamp": "2026-07-10T20:21:49.357573Z"}, {"uuid": "52dd4789-1562-4bfd-b105-f01f1a102ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdi4fyxji27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6212 \u0432 Teracity Software: \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043a\u043b\u044e\u0447\n\n\n\nhttps://kripta.biz/posts/9C6AC80A-02EE-4CC4-9476-04731FFCAE50", "creation_timestamp": "2026-07-11T01:10:10.607139Z"}, {"uuid": "9b811ee9-d85b-4212-a382-594340606834", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdl3vdmjy22", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-6212 \u0432 Teracity Software: \u043e\u0431\u0445\u043e\u0434 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u043a\u043b\u044e\u0447\n\n\n\nhttps://kripta.biz/posts/3F0D2F1D-DAB2-4D26-B190-51D5D870336C", "creation_timestamp": "2026-07-11T02:03:34.325340Z"}, {"uuid": "f899642b-56df-4022-aadf-83b7f4eb79af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://bsky.app/profile/spoint42.bsky.social/post/3mtdwgnpa4622", "content": "Azure SRE Agent : un flux OBO cass\u00e9 transforme l'agent en passe-partout sur toute votre infra (CVE-2026-62830, CVSS 9.9)\nblog.gioria.org/fr/cloud-sec...\n#CyberSecurity #Azure", "creation_timestamp": "2026-08-18T09:42:01.574809Z"}, {"uuid": "9a5f7349-f78c-4c4d-84e9-fe40b70146c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62761", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:20.261355Z"}, {"uuid": "d981c474-d1e1-4ffc-8cbf-39d61827fcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62814", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:29.296775Z"}, {"uuid": "82f7b898-4e62-4fb8-8d17-e4bdc0bcd089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:38.449291Z"}, {"uuid": "d8274863-1d77-449f-b233-5a419f3e555c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62712", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:24.137580Z"}, {"uuid": "dbc578ce-9b21-4bc8-bc85-f67bca041039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:26.363711Z"}, {"uuid": "ababad35-93bb-4b6b-9bf1-635d57010704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62729", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:43.725898Z"}, {"uuid": "63049edb-f072-47e5-ba4b-4389acbc794c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:52.810586Z"}, {"uuid": "7942e063-fc5b-41f4-a239-c442acb58433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:55.140857Z"}, {"uuid": "4c2a2a96-8487-4ee0-83f6-2e7b75d2d8ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:09.077680Z"}, {"uuid": "faa2c6c9-5d19-4020-9980-3c9900a5d4be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3msyat43ig42p", "content": "The LegacyHive LPE (CVE-2026-62832) isn't just another Windows bug; it's a symptom of a shifting, adversarial zero-day disclosure landscape. Enterprises must adapt their security strategy now to avoid critical exposure.\n\nhttps://www.tpp.blog/3pcwzq8\n\n#cybersecurity #legacyhive #cve202662832", "creation_timestamp": "2026-08-13T18:16:00.632019Z"}, {"uuid": "af0bc95a-0608-4801-99b9-2e212e6c8413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:29.714625Z"}, {"uuid": "7b31ea63-8e99-4829-8af1-f5c0983ca084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62745", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:11.248754Z"}, {"uuid": "79cccb5b-7180-493a-ac10-092f2baf6f3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62894", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:32.010623Z"}, {"uuid": "3649c252-35ea-4be2-82aa-2f4ba9efbed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:56.303443Z"}, {"uuid": "d12c6312-a10d-4f1b-997a-d283287a7c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:00.748861Z"}, {"uuid": "e45cce27-a245-41c5-b070-ec6a01be030c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:41.488789Z"}, {"uuid": "9c808532-689f-4eaa-9ca5-0f80dd8742d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62725", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:50.522501Z"}, {"uuid": "8d70d8c2-425d-431f-8a91-088a780412b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62888", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:35.050268Z"}, {"uuid": "8426eb84-5710-4c8a-8a8d-39dbf06ac581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62720", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:15.716583Z"}, {"uuid": "82f8ba6d-35b3-486b-9f64-16da2c24f4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:39.746518Z"}, {"uuid": "be781626-e782-406e-95c4-5a11d45105e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62716", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:06.689143Z"}, {"uuid": "5ecdd881-411a-4111-a45d-44ea40142243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62812", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:13.499779Z"}, {"uuid": "ef94bc96-8ab8-4514-92e7-76659b2e4fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62803", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:24.726715Z"}, {"uuid": "a3ed28d1-c054-4195-b397-e9e8e24ea84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:27.043042Z"}, {"uuid": "1c3dd730-b477-4e38-946e-14528b4c9bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:41.970493Z"}, {"uuid": "0d39b37c-294f-4b44-8620-af3044407c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:48.884636Z"}, {"uuid": "b34cd4a3-2d2a-408f-a7ff-64083e34aeec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:49.610476Z"}, {"uuid": "2eadb425-a114-4b96-b269-aac5d039e3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:58.519889Z"}, {"uuid": "ca836b4d-42b0-4a7b-98cf-7b5f0b25a52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:00.515375Z"}, {"uuid": "f302c8fc-735c-4ae6-a00c-75bfa32ed7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:07.847747Z"}, {"uuid": "2071dcfe-d2e4-46a5-9b29-264cd397776e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:32.592546Z"}, {"uuid": "a6c0bde1-9fdb-4dce-80ca-38ca5af3fd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:44.355355Z"}, {"uuid": "6d48d023-ae05-4301-b9bf-a0e4608b879f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:00.024053Z"}, {"uuid": "1f587fa0-280d-46d3-a918-1fc16817b545", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62718", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:02.243770Z"}, {"uuid": "284936b9-efac-4da4-bf9d-23fd5bb3d133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62715", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:04.463268Z"}, {"uuid": "6656c607-38da-4d1b-8085-8de9bf6b5df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:17.942733Z"}, {"uuid": "02ce4394-aa53-4aa9-9bbc-98e3074a6123", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:51.625729Z"}, {"uuid": "7b327f48-51c2-4a3d-8b73-01076c9ff4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62783", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:55.590654Z"}, {"uuid": "9222e978-44c7-4788-8a0d-8087cf9f541b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:22.507721Z"}, {"uuid": "534d33a9-04bd-4323-858c-9919103d6f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62711", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:38.512028Z"}, {"uuid": "e92ee180-ff08-4275-a59f-c0b37ee725a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:53.362901Z"}, {"uuid": "a4c9e16a-96ec-4c05-b0a0-88768b75b09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:15:57.811915Z"}, {"uuid": "7494bacc-21fd-4209-9c77-796837ee1688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:08.921692Z"}, {"uuid": "14e75029-00f8-4321-b9f8-b7db94614420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:33.756246Z"}, {"uuid": "c51eb6aa-fadc-4364-ad5c-39f6f560be79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:36.084044Z"}, {"uuid": "b56e5085-a332-411b-874d-0b8a693c859b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62708", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:16:54.021876Z"}, {"uuid": "aa451dab-a9df-4f32-826e-e3ad1954c449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:29.366298Z"}, {"uuid": "3d08d3a1-d7ce-4abd-b7fe-c380f5b28ecb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62877", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:34.068821Z"}, {"uuid": "d773a06e-9a0f-4034-bd2c-5239cfde58a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:10.853935Z"}, {"uuid": "6acaffa0-1364-4ce1-a689-b0fd94865410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62797", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:53.842850Z"}, {"uuid": "e4c25008-99ec-434e-b6ba-fb097b8d7c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:05.074971Z"}, {"uuid": "e6d2895d-00cf-42c4-a4a1-238cfc3466e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:07.545947Z"}, {"uuid": "93c96bce-b058-44d3-8bb8-a6ec2f20bf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:19.079848Z"}, {"uuid": "826b2986-55bb-4cbc-9a2e-d9eb7220675c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:41.929001Z"}, {"uuid": "2ffc5ac9-f395-40cd-9a5b-366bc673a203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:10.838169Z"}, {"uuid": "0a7d0915-547a-4736-b191-f3dfb919e8cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:17.504353Z"}, {"uuid": "b341ae63-e7d1-478b-a34b-752d09f17dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6212", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqezvaarpw2i", "content": "\ud83d\udfe0 CVE-2026-6212 - High (8.8)\n\nAuthorization bypass through User-Controlled key vulnerability in Teracity Software Technologies ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6212/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-11T16:01:00.910456Z"}, {"uuid": "a219b2a3-e6a2-4d33-be46-e8c823ef7236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6238", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mqf6dud3zz25", "content": "[Backport staging-26.05] glibc: fix CVE-2026-5435 and CVE-2026-6238\n\nhttps://github.com/NixOS/nixpkgs/pull/540777\n\n#security", "creation_timestamp": "2026-07-11T17:20:42.779058Z"}, {"uuid": "95eff8db-3751-4352-97a6-6855c47ab77c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62876", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:31.575197Z"}, {"uuid": "aa7f3a10-dd1b-4942-a9cf-f7735ff5905e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62733", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:40.731507Z"}, {"uuid": "a3bf5a0f-9d58-4161-a3ae-c9ced43a77f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:43.155505Z"}, {"uuid": "0dc01d87-2983-495e-8d2c-9bd6138c1d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:45.492045Z"}, {"uuid": "f64e78e5-3c8b-4ffc-b4d9-58e5ceeb7e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:14.517988Z"}, {"uuid": "cfa8ccf1-aa28-4a58-b756-92c4ea337028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:16.755472Z"}, {"uuid": "db0fa727-e42b-478b-ba01-15c88783bb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:39.276921Z"}, {"uuid": "ac959e8d-9e7c-4672-9623-986a7e0492df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:06.870540Z"}, {"uuid": "7f87f864-107e-4904-be73-b95d6aa9bf67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62885", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:17:47.725119Z"}, {"uuid": "9b95aa64-ef77-4521-b512-5d4e0edb64fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:08.164521Z"}, {"uuid": "9a5fb560-1f76-417f-ac79-35357b471554", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62768", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:40.343710Z"}, {"uuid": "4c52b378-5b03-4436-ac26-6123ca87c0cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:17.672790Z"}, {"uuid": "3a53d357-054e-4765-8c8e-4e0a0c5f0e0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:18:58.291979Z"}, {"uuid": "199c5021-2a69-4e04-b8e2-0fcad9044826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:02.818992Z"}, {"uuid": "8323c94d-24a4-4c9b-be62-b502c7024d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:37.078216Z"}, {"uuid": "213dfe62-4583-4f0d-9a1b-a0da8e25365c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62701", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:48.184180Z"}, {"uuid": "e12db783-72ec-4836-9580-2445937c721d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62734", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:57.380135Z"}, {"uuid": "223622d0-b547-4b36-a458-aa14494008a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:04.620758Z"}, {"uuid": "4ccf2934-510e-43dc-a19d-fc367eb1fb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:18.053632Z"}, {"uuid": "6f1a0c6d-42c5-4f80-8648-42bd10aee357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:19:59.754699Z"}, {"uuid": "d1a8aa02-8bf0-4dbb-bdf3-76f2b5fc5bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:15.820541Z"}, {"uuid": "25a63fd8-9f59-409f-aad5-26c0c85a9b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:39.724516Z"}, {"uuid": "ae690379-b28b-4d7e-a8ff-476ef18f6fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:26.002340Z"}, {"uuid": "7c02c4d6-0aa2-4a80-b5cc-2ab821733d11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62792", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:31.464305Z"}, {"uuid": "5bf3f49e-9c0c-44e8-beab-751f5c95e4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:16.766946Z"}, {"uuid": "db35ec56-f165-401d-a36f-6809733923d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:24.733842Z"}, {"uuid": "e9a282ef-8b6c-415c-bbdc-3e75bf61d063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62773", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:51.819518Z"}, {"uuid": "351f3dd4-7daf-45d9-bc7f-c84a307c972f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62785", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:32.823465Z"}, {"uuid": "cec29f4b-9c39-4a92-8e6c-59ee9bc23308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:21.430737Z"}, {"uuid": "9e00b76d-6961-4029-aa60-373e369326fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:44.118301Z"}, {"uuid": "b105ee44-2184-4c5b-9c41-b3f08bc4a4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:46.347000Z"}, {"uuid": "3aeeac80-531b-4c09-8d09-d02fbd9c926f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62747", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:33.725439Z"}, {"uuid": "fc9754a1-3543-40fd-add2-0395def91c87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:58.737996Z"}, {"uuid": "e0cddbe9-77e7-4ca1-9d29-b4d1fbf2289d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62795", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:35.118165Z"}, {"uuid": "26116231-7945-4ef9-a580-afe2663d36b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:37.457487Z"}, {"uuid": "c9532af0-2eb8-4d41-b3c1-ba8f69ae7e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:09.747951Z"}, {"uuid": "2cb6fe55-cabc-4525-b6c1-a57fccae8909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62710", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:36.062896Z"}, {"uuid": "09266509-30c0-436c-a239-3d3debf6c071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62709", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:00.955127Z"}, {"uuid": "d170f191-d66e-47d4-94c9-4c567ff4fccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62695", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:38.404802Z"}, {"uuid": "6b38651d-f7de-4179-9369-bc7ce97e5623", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:03.147780Z"}, {"uuid": "4abdd35e-45b8-4298-a352-26f94256c283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:49.587836Z"}, {"uuid": "9d9606d0-9447-4072-972f-bae9e28e59f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62754", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:47.387691Z"}, {"uuid": "04446a28-b9ca-40fa-a302-6b470719bdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:20:54.160066Z"}, {"uuid": "8b246427-18a7-41b2-ab6a-1a9e151ad36b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62690", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:52.991712Z"}, {"uuid": "9584a9a1-574a-4963-8b78-4e3b52f9255a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:32.832800Z"}, {"uuid": "f49087f4-7806-4e56-bb69-608172923019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62751", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:21:30.615067Z"}, {"uuid": "d408973b-a0d4-4c21-8dc7-fec1838fcc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:35.164496Z"}, {"uuid": "2cfb1cf8-173d-468e-a9f9-cebee5108025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:30.577283Z"}, {"uuid": "14d33b3a-b714-4178-9a16-43fbecebe2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:22:23.724591Z"}, {"uuid": "54599bfe-dba1-4e37-b7fa-14ca5a747c57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://gist.github.com/alon710/2e0b87d1a38ef4ec24f86d5409697e37", "content": "# CVE-2026-62902: CVE-2026-62902: .NET and Visual Studio Information Disclosure Vulnerability\n\n> **CVSS Score:** 6.5\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62902\n\n## Summary\nAn information disclosure vulnerability in Microsoft .NET and Microsoft Visual Studio allows an unauthorized remote attacker to trigger outbound network requests (SSRF) and disclose sensitive environment data by leveraging untrusted inputs and user interaction.\n\n## TL;DR\nMicrosoft .NET and Visual Studio fail to restrict the resolution of external resources, enabling remote attackers to leak sensitive credentials and internal metadata via crafted files and Server-Side Request Forgery.\n\n## Technical Details\n\n- **CWE ID**: CWE-829, CWE-693, CWE-918\n- **Attack Vector**: Network (AV:N)\n- **Attack Complexity**: Low (AC:L)\n- **Privileges Required**: None (PR:N)\n- **User Interaction**: Required (UI:R)\n- **CVSS v3.1 Score**: 6.5 (Medium)\n- **Exploit Status**: None\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft .NET 8.0\n- Microsoft .NET 9.0\n- Microsoft .NET 10.0\n- Microsoft Visual Studio 2022 version 17.14\n- Microsoft Visual Studio 2026 version 18.8\n- **Microsoft .NET 8.0**: 8.0.0 to < 8.0.30 (Fixed in: `8.0.30`)\n- **Microsoft .NET 9.0**: 9.0.0 to < 9.0.19 (Fixed in: `9.0.19`)\n- **Microsoft .NET 10.0**: 10.0.0 to < 10.0.11 (Fixed in: `10.0.11`)\n- **Microsoft Visual Studio 2022 version 17.14**: 17.14.0 to < 17.14.38 (Fixed in: `17.14.38`)\n- **Microsoft Visual Studio 2026 version 18.8**: 18.0 to < 18.8.3 (Fixed in: `18.8.3`)\n\n## Mitigation\n\n- Apply the August 2026 security updates for .NET and Visual Studio.\n- Block outbound SMB (ports 139 and 445) to prevent NTLM credential harvesting.\n- Enforce outbound network filtering to restrict servers and development workstations from accessing unapproved external domains.\n\n**Remediation Steps:**\n1. Upgrade .NET 8.0 instances to version 8.0.30 or higher.\n2. Upgrade .NET 9.0 instances to version 9.0.19 or higher.\n3. Upgrade .NET 10.0 instances to version 10.0.11 or higher.\n4. Update Visual Studio 2022 to version 17.14.38 or higher and Visual Studio 2026 to version 18.8.3 or higher.\n5. Implement network-level blocking of outbound TCP ports 139 and 445.\n\n## References\n\n- [Microsoft MSRC Security Update Guide](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62902)\n- [CVE.org Official Record](https://www.cve.org/CVERecord?id=CVE-2026-62902)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62902) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T20:33:00.060110Z"}, {"uuid": "0905167b-493b-47c8-a701-6906c38b6612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62778", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:28.712567Z"}, {"uuid": "5a69795a-5ed9-4fab-b5bf-c92ede99789e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62883", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:33.372129Z"}, {"uuid": "4b284c8b-ed00-41af-9058-f51577b44d2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:28.750008Z"}, {"uuid": "8ace99b2-8bdf-47ba-bb1e-7aaada3519b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:09.483625Z"}, {"uuid": "76bec427-4010-498a-bd0d-6c912a58cd16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:23.806631Z"}, {"uuid": "b6616944-4447-4b7e-942b-ae4710e5c606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:26.445189Z"}, {"uuid": "4b2174e7-9299-4f94-9056-954446caa9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62702", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:38.589795Z"}, {"uuid": "bc7b13c3-4067-4468-a55c-b6a29f191797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62730", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:16.872608Z"}, {"uuid": "9313cb92-15df-40f5-9366-381ce28f7fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62811", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:19.266402Z"}, {"uuid": "6cbbe43b-a622-47db-9b0f-938495e3b628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62800", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:24.089046Z"}, {"uuid": "2aa1659c-c410-4f64-a858-b19d11c3fb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3msyhioetzj2y", "content": "Microsoft patched the LegacyHive Windows zero-day, CVE-2026-62832, in August 2026 updates. The flaw in Windows User Profile Service could let authenticated local attackers gain admin privileges. #LegacyHive #CVE202662832 #WindowsUpdate", "creation_timestamp": "2026-08-13T20:15:26.424219Z"}, {"uuid": "d2c4eaef-6729-4c7e-b68b-9ce44b25e967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62750", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:33.877005Z"}, {"uuid": "ad4a58f0-f578-405d-aaa6-5dee35e97ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62774", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:45:40.892965Z"}, {"uuid": "cd15a4b6-beef-4429-83b6-63436885b126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:52.934025Z"}, {"uuid": "47cde62e-b0e3-4eea-9e7a-10cfd844e6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:55.654526Z"}, {"uuid": "1e483cac-42c8-46d9-b249-b8cfef750eae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:04.617736Z"}, {"uuid": "970ecbba-250e-4af6-8d8b-8adc1ada5aed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:38.147588Z"}, {"uuid": "d4d9a274-0ed4-4a35-90d6-cb9473b6b263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:37.857466Z"}, {"uuid": "73f0d823-38ac-4b9d-8669-21ae1b96b3c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:38.786635Z"}, {"uuid": "37f5ff77-6eb1-4e78-8273-e68c7b6e3518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:39.702084Z"}, {"uuid": "8b33aca6-ffe2-411e-a792-75d82e85eeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:42.052252Z"}, {"uuid": "20e11a9b-3c9d-45f9-a0eb-db8aa32735ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:26.364892Z"}, {"uuid": "88e2ed69-a4c7-4df1-ae36-3fcad332aa79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62741", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:58.022961Z"}, {"uuid": "8a19a4d9-fc28-4699-8a56-2a7bb03e128d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:11.809648Z"}, {"uuid": "8cdb7275-59bd-404d-86b8-80c1b4b4dbfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62777", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:11.781071Z"}, {"uuid": "5e422a04-c221-44de-8d16-a4919a4e5a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:19.260420Z"}, {"uuid": "4f6960d2-4878-46ec-aea6-a3035b2bdb19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62881", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:31.075817Z"}, {"uuid": "c5f49531-e5ed-4af8-a925-cc1a815587f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284", "content": "", "creation_timestamp": "2026-08-11T20:46:50.190115Z"}, {"uuid": "d5a48b62-a72f-4af0-9304-b76fb098337f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:21.301928Z"}, {"uuid": "1b215d4e-9db1-4d79-9e5d-8f358a0b05a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:28.844870Z"}, {"uuid": "2e605418-2642-465e-85f7-19502f666825", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:35.870331Z"}, {"uuid": "cdeffa38-7caf-49e7-ac9d-7ae2be9c0899", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:26.418762Z"}, {"uuid": "5d12edb0-ee32-44ed-889f-d5b3897a1efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285", "content": "", "creation_timestamp": "2026-08-11T20:47:31.334589Z"}, {"uuid": "65fbe273-4603-466e-b2d5-4cec25aa3c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:13.786438Z"}, {"uuid": "2e07dd0e-f542-4a21-a2ab-39010b9a9579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:15.263139Z"}, {"uuid": "e4609a63-86c0-40c4-9e7c-b68aa1a6c29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:16.725926Z"}, {"uuid": "c7bb7061-5b92-4a51-a08c-7c9bc0e17c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:22.691958Z"}, {"uuid": "4e92da83-f490-4f46-b3b2-566ea7d70d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:24.143265Z"}, {"uuid": "1e9f80d5-f47d-48e2-8935-86026ef9e1ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:24.614451Z"}, {"uuid": "2c01e034-6956-4127-9ec1-70f479e0ff60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:27.006999Z"}, {"uuid": "b66dff72-579f-4630-90b5-2a683ee08f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:28.482356Z"}, {"uuid": "35400ca1-0ce2-43ca-b70f-5df4f15c6d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:29.443491Z"}, {"uuid": "bc08a7b9-f32b-44ee-814b-a295b5d45bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:14.276199Z"}, {"uuid": "dcc19ddd-9cf5-49cb-baa9-480515c67b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:19.115057Z"}, {"uuid": "c629d4d5-6cc9-4bd7-8071-2961009957cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:25.585743Z"}, {"uuid": "3be9b2bf-67ca-4b62-9a97-b208ac9b0ed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:33.162031Z"}, {"uuid": "378db16a-559d-4729-960c-24d7c15bf6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:34.097699Z"}, {"uuid": "126c777d-c197-484a-a1fb-1ff6ef65e8a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:36.445811Z"}, {"uuid": "e2ac4fb4-accc-4e91-9406-cfe3211403c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:14.777225Z"}, {"uuid": "30c31019-1e04-4397-a27a-767add54f64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:15.739914Z"}, {"uuid": "5b9e1032-d759-41f2-97a0-d73b04a4414f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:18.162679Z"}, {"uuid": "afa4aee9-1e9f-4e34-854c-e1363b1aa260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:18.626593Z"}, {"uuid": "67192b3b-01cc-480f-a93b-896928e796df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:16.220466Z"}, {"uuid": "cb4c7740-630e-4b15-9569-afc9a40c9017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgx5zk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:17.224098Z"}, {"uuid": "75503375-49b0-4efc-b190-28515cf61553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:28.000530Z"}, {"uuid": "5a14c6a8-f594-405d-9dca-cfcaf806ff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:30.379771Z"}, {"uuid": "651468ee-07e9-468a-8837-dec99f01b145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:33.632471Z"}, {"uuid": "eda83d75-0b07-4ec1-b981-c94359dcb4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:34.581796Z"}, {"uuid": "df257eff-0721-43a7-aab9-72287c9c0e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:35.519482Z"}, {"uuid": "07a0838a-e04e-4619-8dff-e3dd4f334def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:42.527519Z"}, {"uuid": "591738a2-9fce-489e-ac1e-e35f0cb18f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:19.602331Z"}, {"uuid": "69c13193-1600-448d-94f2-cc4617750196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:26.085544Z"}, {"uuid": "c2c669b3-6998-462d-9df0-e6eda98bb014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:27.491092Z"}, {"uuid": "ce1227d3-4984-4ec5-9d2a-fc0cd2d12460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:32.252433Z"}, {"uuid": "277c41b0-d75f-44a7-91d9-58318de18b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:20.106880Z"}, {"uuid": "8d7f5ee6-b7cd-44cc-91b8-f5cf11d755f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:20.594618Z"}, {"uuid": "d23301a9-c76a-4d0e-a50f-18153da7144a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:23.165563Z"}, {"uuid": "5ac3a20e-88dd-41a2-80fc-ea76a846b3fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:21.077524Z"}, {"uuid": "143bf741-9a75-46c8-a418-9692ecb9da24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimgxcvs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:21.563129Z"}, {"uuid": "e3cf5125-d8da-4e54-8a78-14b801eaf3f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:23.647780Z"}, {"uuid": "18eaa985-1064-4d71-aa4c-c6fe80056d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimhpwyk2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:25.103689Z"}, {"uuid": "f92b6aa2-8452-47c7-8631-ffbd760e9509", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:31.312526Z"}, {"uuid": "9deab1ed-79e5-4195-a2ec-407558ad4423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:31.785889Z"}, {"uuid": "146e3f7a-17bc-4a5b-a824-d9c760af80a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjpgak2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:32.698825Z"}, {"uuid": "932a0559-e1a6-4720-adfc-bfed75464d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:35.989905Z"}, {"uuid": "35d42da7-df86-4920-9af7-a6a2884daff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:41.123672Z"}, {"uuid": "a456c6ee-a779-40e6-90f4-c4ad2734fb17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:41.596727Z"}, {"uuid": "7558326e-aef6-40d6-be1e-74fe89f941b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:43.926108Z"}, {"uuid": "9ec245a5-df09-4731-88f6-bc94805fcefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:28.964799Z"}, {"uuid": "df641a9d-0f54-4731-bd0c-f87c173019e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjgnxs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:29.903512Z"}, {"uuid": "fef68b8a-58d8-4bfa-b7a1-1aaa07e82fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:36.922133Z"}, {"uuid": "33b89b2d-2ef6-42d4-93dd-5150cac2e6cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:38.317033Z"}, {"uuid": "fb8085ab-6fa0-4496-808f-efa451f26a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:40.641986Z"}, {"uuid": "6fb5f751-6839-4ec1-b4b2-1cd943c539fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:44.397324Z"}, {"uuid": "719c5bc5-3d0e-4bc4-857b-6ec8a99d25c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:44.880200Z"}, {"uuid": "4368d939-eea4-4f97-9e3a-c38c90cd0648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimjzmg22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:37.387709Z"}, {"uuid": "2b134a78-7700-4723-95ef-e6282b54d46f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:45.347989Z"}, {"uuid": "f9c9bd86-67d9-48f2-b34b-4fc9f78c2897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:52.540817Z"}, {"uuid": "4ec434cd-62ed-4c56-a6b6-4d34769c780a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:53.976738Z"}, {"uuid": "ce80d40d-50bf-42e7-bf4f-ae3783cd858f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:54.448295Z"}, {"uuid": "3fbab29c-fec9-4b86-8ec8-1a3c031fcfd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:54.919705Z"}, {"uuid": "bd9fdc4b-81ba-4995-bd6b-0a87102d81a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:55.389262Z"}, {"uuid": "877fc9dd-7cff-4c22-acd7-9827ceefd0ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:57.256321Z"}, {"uuid": "9d4e08a9-7f64-4453-8c43-e23306e87d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:58.185890Z"}, {"uuid": "3b7dee25-c1bd-4ae6-8a5b-ec596ab72af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:53:01.912756Z"}, {"uuid": "4a697ee3-93e6-4a0f-8770-55d1368e8d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62143", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjffc5gow2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62143: \u041e\u0431\u0445\u043e\u0434 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 SSRF \u0432 html_to_markdown\n\n\n\nhttps://kripta.biz/posts/22068C07-D20C-493F-B9FD-2C8081EDA6FB", "creation_timestamp": "2026-07-13T09:37:25.854928Z"}, {"uuid": "f9fc76bc-e067-4ea8-9769-c717579057e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:40.173978Z"}, {"uuid": "e93644a2-fdef-41c6-aec5-b5326cb5788a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:46.332524Z"}, {"uuid": "7ffc25eb-a809-49be-8974-bdc74b4b195d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:46.819806Z"}, {"uuid": "ac515f28-8ad7-4e62-ad70-44d2ce04e66c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:47.302187Z"}, {"uuid": "5294c0af-6719-4dd0-9fec-fe0c0c7cf5ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:52:51.114991Z"}, {"uuid": "53fea520-0496-42ce-90cd-15b0af8d1aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:55.862162Z"}, {"uuid": "7d8539e4-118b-4c85-8a7c-10ff676d1861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:53:02.840447Z"}, {"uuid": "7a3e2311-4adb-4ee8-81e4-d6879593ac76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkfla22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:42.998083Z"}, {"uuid": "f60ebda7-ad16-4f7b-a483-a8e4f9294f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimkqhuc2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:45.845268Z"}, {"uuid": "46916b93-025d-4f88-b424-9696b28df63b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:48.792167Z"}, {"uuid": "d2ac1a67-fe91-4594-81a9-db284cd60a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:52:49.730718Z"}, {"uuid": "5ec55a3a-2ab3-4ce9-be9e-488db551ed98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:53:05.255624Z"}, {"uuid": "621c2d8c-b952-44cb-b494-8fe393986cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:48.296759Z"}, {"uuid": "2b5893cc-d6f4-49da-becf-16f34f8efb0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:49.257297Z"}, {"uuid": "7786a565-cccd-4558-a339-c31f42047d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:52:51.604528Z"}, {"uuid": "6f9ea4f0-e34c-4477-b78f-092580b23736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62898: A use after free in MSQuic, the library we use for HTTP/3 could enable information disclosure. If you are running a web application with Kestrel (or Yarp), or are hosting a kestrel endpoint in your app, and have HTTP/3 enabled this affects you.", "creation_timestamp": "2026-08-11T20:52:56.774699Z"}, {"uuid": "0da04939-01cc-43f2-b145-35dcbb653ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:57.707680Z"}, {"uuid": "f8207407-a4ec-4040-8e52-9cb1c24f8819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:53:03.331386Z"}, {"uuid": "56f48945-51ef-409c-9fa6-f7706399e416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:53:05.724980Z"}, {"uuid": "aa1159f1-f530-4df9-b4ee-e6b844d5a48a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62900: A brand-new area! SourceLink. I don't think we've had anything there before. Information disclosure via logging. Your logs would have to be insecure though. You do secure access to your logs?", "creation_timestamp": "2026-08-11T20:53:06.197556Z"}, {"uuid": "3f75e635-0e3f-4910-b1cf-ccc8ecce1556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:52:50.200447Z"}, {"uuid": "d416cc40-bb4e-4ae7-a8c8-7ffbfaf70ad6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstiml27f22c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:52:50.654890Z"}, {"uuid": "137363bb-fe86-4883-9f98-f6970e6bc71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62899: Classic request smuggling attack against HttpListener. If you have a asp.net core app, or are using Kestrel or Yarp, or host an endpoint in your app this affects you", "creation_timestamp": "2026-08-11T20:52:53.011033Z"}, {"uuid": "fd781245-fe16-43e1-b78c-f8d6706c26a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:53:00.453334Z"}, {"uuid": "573ef1e6-05d9-4536-9d04-65b19b227055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62909: The IPC channel used in .NET diagnostics wasn't ACLed correctly. This can affect anyone with diagnostics enabled, include debuggers, dotnet monitor etc.", "creation_timestamp": "2026-08-11T20:53:04.253066Z"}, {"uuid": "b5d7da64-6afa-4915-bc1b-e7e528863a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3msyli3o6ps2b", "content": "Microsoft Finally Patches the LegacyHive Windows Zero-Day, CVE-2026-62832, After Weeks of Exposure +\u00a0Video\n\nA Dangerous Windows Weakness Finally Gets an Official Fix For weeks, Windows defenders faced an uncomfortable reality: a publicly disclosed vulnerability in the Windows User Profile Service\u2026", "creation_timestamp": "2026-08-13T21:26:42.055334Z"}, {"uuid": "1ff7de3a-fa9d-45b9-9c7a-233e0562ee6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnbxbs2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:52:53.510191Z"}, {"uuid": "0ed3bbd8-4888-4957-b7d5-d795573ced40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62902: WPF again, this time loading a specially crafted document would cause information disclosure.", "creation_timestamp": "2026-08-11T20:53:00.944847Z"}, {"uuid": "c6ada734-9735-4109-8c65-fd32a3845846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjy4k2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62897: More WPF! This time information disclosure via a malformed document.", "creation_timestamp": "2026-08-11T20:53:01.426315Z"}, {"uuid": "2073d044-46db-43c6-baf8-20386742494b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62901: An unchecked input for loop condition in our WebSocket allows an unauthorized attacker to deny service over a network. Using web sockets, as a client or as a server, this affects you.", "creation_timestamp": "2026-08-11T20:53:03.792408Z"}, {"uuid": "8d70e524-8e31-44fa-a10d-5220d5444df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://bsky.app/profile/blowdart.me/post/3mstimnjz3s2c", "content": "github.com/dotnet/annou...\n\nCVE-2026-62886: An integer overflow or wraparound in WPF allows an unauthorized attacker to elevate privileges locally.\n\nIf you have a WPF desktop app, this affects you.", "creation_timestamp": "2026-08-11T20:53:04.752853Z"}, {"uuid": "2be69bd9-24a1-46ed-8c50-d18ff70aa9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62147", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjvlyzosg2c", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62147 \u0432 Tempo Operator: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/24F22E6D-C38B-454C-B6D6-AC25777273EB", "creation_timestamp": "2026-07-13T14:27:30.878043Z"}, {"uuid": "80198393-09db-4446-a847-bef28934287a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62147", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqjuimxr2t2x", "content": "CVE-2026-62147 - Tempo-operator: tempo operator: query rbac bypass\nCVE ID : CVE-2026-62147\n \n Published : July 13, 2026, 12:16 p.m. | 1\u00a0hour, 13\u00a0minutes ago\n \n Description : The Tempo Operator's gateway component failed to consistently apply namespace-scoped redaction on some ...", "creation_timestamp": "2026-07-13T14:07:43.834495Z"}, {"uuid": "28e400c5-c2f8-41aa-9aea-1067e952ea92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62147", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkgenva3o2e", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62147 \u0432 Tempo Operator: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/3C150815-B5CD-4A24-9180-8D629FBD8E60", "creation_timestamp": "2026-07-13T19:27:38.163795Z"}, {"uuid": "8171e5b0-a8c7-4494-b6fc-eb019a2aad97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62240", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknn46cuy26", "content": "CVE-2026-62240 - CrewAI\nCVE ID : CVE-2026-62240\n \n Published : July 13, 2026, 9:04 p.m. | 26\u00a0minutes ago\n \n Description : CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist ...", "creation_timestamp": "2026-07-13T21:37:37.775425Z"}, {"uuid": "86b18898-5e99-4d09-ba7e-1a3d4caf9d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62239", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqknqhs2p22t", "content": "CVE-2026-62239 - FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py\nCVE ID : CVE-2026-62239\n \n Published : July 13, 2026, 9:03 p.m. | 26\u00a0minutes ago\n \n Description : FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vul...", "creation_timestamp": "2026-07-13T21:39:30.604630Z"}, {"uuid": "992c8da2-938c-441a-b35a-e6ca22b2cac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62242", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqko3zv2pr27", "content": "CVE-2026-62242 - Spring Boot Admin Server\nCVE ID : CVE-2026-62242\n \n Published : July 13, 2026, 9:04 p.m. | 25\u00a0minutes ago\n \n Description : Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to regis...", "creation_timestamp": "2026-07-13T21:45:58.679918Z"}, {"uuid": "82c37dbb-f8a2-4555-86f6-1529212d0a44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62327", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqkogyu3uw2v", "content": "CVE-2026-62327 - 9router\nThe 9Router software up to version 0.4.41 allows anyone to access sensitive API keys for connected AI services without needing a password. This is a serious issue because attackers\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#9router #decolua #CVE #infosec", "creation_timestamp": "2026-07-13T21:52:06.517905Z"}, {"uuid": "8b3316ba-73d5-49ce-89e2-4665a4b90788", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62988", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-20T03:00:03.714937Z"}, {"uuid": "942dd0ba-056c-4114-b672-6900ff022eab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://t.me/GithubRedTeam/88622", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279.py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 87achrafg-stack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 11:40:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:43.612882Z"}, {"uuid": "91263ec2-6975-4dbe-ab0a-de5f1ae4a180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://gist.github.com/alon710/5016d0efcb653d018ab1eaff732b8582", "content": "# CVE-2026-62871: CVE-2026-62871: Local Code Execution and Elevation of Privilege in .NET and Visual Studio\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62871\n\n## Summary\nCVE-2026-62871 is a high-severity local code execution and elevation of privilege vulnerability in Microsoft .NET and Microsoft Visual Studio. It arises from an out-of-bounds write (heap-based buffer overflow) in the runtime environment during native interoperability or unmanaged pointer manipulation, requiring user interaction to execute arbitrary instructions.\n\n## TL;DR\nAn out-of-bounds write in Microsoft .NET and Visual Studio allows local attackers to execute arbitrary code via malformed payloads, requiring user interaction.\n\n## Technical Details\n\n- **CWE ID**: CWE-787 / CWE-122\n- **Attack Vector**: Local\n- **CVSS v3.1**: 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n- **Impact**: Elevation of Privilege / Arbitrary Code Execution\n- **Exploit Status**: None (Theoretical)\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Microsoft .NET 8.0\n- Microsoft .NET 9.0\n- Microsoft .NET 10.0\n- Microsoft Visual Studio 2022\n- Microsoft Visual Studio 2026\n\n## Mitigation\n\n- Deploy official Microsoft cumulative updates for .NET and Visual Studio.\n- Enforce execution policies to prevent unprivileged users from executing untrusted binaries.\n- Implement strong application whitelisting and software restriction policies.\n\n**Remediation Steps:**\n1. Identify vulnerable runtimes on system hosts by executing 'dotnet --list-runtimes' via the command line.\n2. Update .NET 8.0 to version 8.0.30 or higher, .NET 9.0 to 9.0.19 or higher, and .NET 10.0 to 10.0.11 or higher.\n3. Update Visual Studio 2022 (v17.14) to version 17.14.38 or later, and Visual Studio 2026 (v18.8) to version 18.8.3 or later.\n\n## References\n\n- [Official MSRC Security Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62871)\n- [Official CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-62871)\n- [National Vulnerability Database (NVD) Entry](https://nvd.nist.gov/vuln/detail/CVE-2026-62871)\n- [MITRE ATT&CK Search Page](https://attack.mitre.org/search/?search=CVE-2026-62871)\n- [CISA Known Exploited Vulnerabilities (KEV) Catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n- [EU Vulnerability Database (EUVD) Portal](https://euvd.enisa.europa.eu/)\n- [Shodan CVEDB Entry](https://www.shodan.io/search?query=CVE-2026-62871)\n- [Nuclei Templates Repository Search](https://github.com/projectdiscovery/nuclei-templates/search?q=CVE-2026-62871)\n- [PacketStorm Security Search Page](https://packetstormsecurity.com/search/?q=CVE-2026-62871)\n- [ExploitDB / Shodan CVEDB Reference](https://cvedb.shodan.io/cve/CVE-2026-62871)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62871) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T21:32:34.450065Z"}, {"uuid": "822579c1-361a-445e-bda5-1ccd4ce4626e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62192", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrbdxlxy2t", "content": "CVE-2026-62192 - OpenClaw 2026.6.6\nCVE ID : CVE-2026-62192\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions that allows lower-trust caller...", "creation_timestamp": "2026-07-13T22:42:38.190300Z"}, {"uuid": "82ffd940-1c0e-4787-933e-33d36e8e9b6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62185", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrepm4uj2g", "content": "CVE-2026-62185 - Argo CD Helm Chart\nCVE ID : CVE-2026-62185\n \n Published : July 13, 2026, 9:31 p.m. | 20\u00a0minutes ago\n \n Description : Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Ar...", "creation_timestamp": "2026-07-13T22:44:31.066595Z"}, {"uuid": "86042f7e-be61-40f7-b53a-21a7ebae56cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62197", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkricfkio2z", "content": "CVE-2026-62197 - OpenClaw\nCVE ID : CVE-2026-62197\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust ...", "creation_timestamp": "2026-07-13T22:46:31.505663Z"}, {"uuid": "af4e5e7e-16ac-4670-89ce-79c8042cef65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrm5eao22k", "content": "CVE-2026-62187 - OpenClaw\nCVE ID : CVE-2026-62187\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configure...", "creation_timestamp": "2026-07-13T22:48:40.479968Z"}, {"uuid": "ca7138fd-85f8-4757-a992-de4cb27b90d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62184", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrur56ci2g", "content": "CVE-2026-62184 - luci-app-banip Log Monitor IP Extraction Bypass\nCVE ID : CVE-2026-62184\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : luci-app-banip contains a log parsing vulnerability where the awk-based parser extracts the first IPv4 address fro...", "creation_timestamp": "2026-07-13T22:53:29.410287Z"}, {"uuid": "73a2f62e-8b34-4e6f-a07b-67d4d2dbbd3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62199", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkrznklv22l", "content": "CVE-2026-62199 - OpenClaw\nCVE ID : CVE-2026-62199\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected featur...", "creation_timestamp": "2026-07-13T22:56:13.680499Z"}, {"uuid": "8135bd78-19c0-449b-a52a-c39dd350d07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62200", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z", "content": "CVE-2026-62200 - OpenClaw\nCVE ID : CVE-2026-62200\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.1 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected fe...", "creation_timestamp": "2026-07-13T22:59:13.896908Z"}, {"uuid": "0a192d44-d4d6-47ef-ad68-09340a96cd09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkslpine22x", "content": "CVE-2026-62327 - 9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats\nCVE ID : CVE-2026-62327\n \n Published : July 13, 2026, 9:37 p.m. | 14\u00a0minutes ago\n \n Description : 9Router through version 0.4.41 contain an unauthenticated information disclosure vulnerabil...", "creation_timestamp": "2026-07-13T23:06:19.801872Z"}, {"uuid": "dba2a128-a3db-4d51-bf07-b6b2ee930cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62194", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkstf3jth2l", "content": "CVE-2026-62194 - OpenClaw 2026.5.20\nCVE ID : CVE-2026-62194\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust cal...", "creation_timestamp": "2026-07-13T23:10:37.021721Z"}, {"uuid": "e01afecc-2043-49aa-bdc4-cd98dd8d2998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62195", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkt4djxzu2i", "content": "CVE-2026-62195 - OpenClaw 2026.5.20\nCVE ID : CVE-2026-62195\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust c...", "creation_timestamp": "2026-07-13T23:15:37.501850Z"}, {"uuid": "d204e1a5-04f0-4822-b497-049be03976f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62190", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqktfbyywq2x", "content": "CVE-2026-62190 - OpenClaw\nCVE ID : CVE-2026-62190\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or persis...", "creation_timestamp": "2026-07-13T23:20:37.749009Z"}, {"uuid": "447a3a4c-554d-4091-90f0-e35a5e2f3cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62196", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqktoai2dm2x", "content": "CVE-2026-62196 - OpenClaw 2026.3.22\nCVE ID : CVE-2026-62196\n \n Published : July 13, 2026, 9:30 p.m. | 21\u00a0minutes ago\n \n Description : OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender ...", "creation_timestamp": "2026-07-13T23:25:38.148156Z"}, {"uuid": "8fbde5ba-f781-4f46-924f-af57cfbec791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62188", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqktx6xbvt27", "content": "CVE-2026-62188 - OpenClaw\nCVE ID : CVE-2026-62188\n \n Published : July 13, 2026, 9:30 p.m. | 22\u00a0minutes ago\n \n Description : OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ignor...", "creation_timestamp": "2026-07-13T23:30:38.695885Z"}, {"uuid": "f8dcd9f9-df6f-472b-a0d9-4a9684cca564", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqkua5tviz2x", "content": "CVE-2026-62328 - 9Router 0.4.41 - Unauthenticated Information Disclosure via API Usage Endpoints\nCVE ID : CVE-2026-62328\n \n Published : July 13, 2026, 9:37 p.m. | 14\u00a0minutes ago\n \n Description : 9Router through version 0.4.41 contain an unauthenticated information disclosure v...", "creation_timestamp": "2026-07-13T23:35:39.393200Z"}, {"uuid": "86e6bb03-3941-4aa6-8ce7-815d9a687bf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "seen", "source": "https://t.me/GithubRedTeam/88622", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279.py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 87achrafg-stack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 11:40:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:42.777286Z"}, {"uuid": "4f73fcef-a532-45e0-b108-4ed61b42ded8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:15.584440Z"}, {"uuid": "e391303e-6377-4dcc-a5c2-d2c751a5728b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62327", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116915387588740902", "content": "CVE-2026-62327 (CRITICAL): decolua 9Router \u22640.4.41 exposes plaintext API keys & usage stats via unauthenticated /api/usage/stats. No patch yet \u2014 restrict access or add auth controls. Details: https://radar.offseq.com/threat/cve-2026-62327-missing-authentication-for-critical-4c8f1eac7b8172c7 #OffSeq #CVE #APIsecurity #Vuln", "creation_timestamp": "2026-07-14T00:00:38.703535Z"}, {"uuid": "5ba22fe6-b6cd-4086-9c43-b3ba53ae21c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62327", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqkvmuflp22f", "content": "decolua 9Router \u22640.4.41 has a CRITICAL flaw: unauthenticated access to /api/usage/stats leaks all connected AI API keys & usage. Restrict endpoint or add authentication ASAP. https://radar.offseq.com/threat/cve-2026-62327-missing-authentication-for-critical-4c8f1eac7b8172c7 #OffSeq #CVE #APIsecurity", "creation_timestamp": "2026-07-14T00:00:40.472306Z"}, {"uuid": "662d300e-ad8e-4776-8ca0-045578911382", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:15.833190Z"}, {"uuid": "577de870-9631-4579-8e27-bce1a06f7323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:16.034019Z"}, {"uuid": "1b8016ca-08ef-4354-9e48-feaca926c648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:18.386650Z"}, {"uuid": "00e459aa-a8b8-4c52-b6f5-1d6740673607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:22.229437Z"}, {"uuid": "61903c4f-b7dd-45ee-bfbe-92067bf165bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:22.960458Z"}, {"uuid": "32b9b7a4-e59e-4375-8470-aa9e7481313a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:23.034765Z"}, {"uuid": "7ce3d0c9-95e0-46f8-bbdd-ff25ec40ea22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:24.750189Z"}, {"uuid": "813fb8ee-604c-4ebe-99ae-2463e00969f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:24.675125Z"}, {"uuid": "c5015af1-e59c-49c7-a85d-bee6a3c1ad76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-11T22:01:22.887746Z"}, {"uuid": "bf9ce6b9-e17f-471e-801c-518f9facdd67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes/", "content": "Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.\n\n\nImage: Shutterstock, Mallika Home Studio.\n\nAugust’s overstuffed bundle of patch joy from Microsoft did not eclipse its recording breaking release of more than 570 security updates last month, but it is double June’s then-record batch of nearly 200 fixes. Microsoft has attributed the recent patch deluge to vulnerability discoveries aided by artificial intelligence, and experts roundly agree that Windows users should get used to the idea of Patch Tuesdays (the second Tuesday of each month) covering hundreds of newly discovered security flaws.\n\nFully 42 of the 398 flaws that Microsoft patched today earned Redmond’s most-dire “critical” rating, meaning they are severe enough that malware or malcontents could exploit them to gain remote control over a Windows computer with little to no help from the user.\n\nThe sole known “zero day” bug fixed by Microsoft this month is CVE-2026-68820, a privilege escalation weakness in a core Windows component called afd.sys, which the security firm Automox describes as “the driver behind Windows socket connections on effectively every endpoint.”\n\n“This isn’t a front-door bug,” Automox’s Landon Miles wrote in a Patch Tuesday blog post. “It’s step two in a chain: an attacker phishes their way into a low-privilege foothold, then uses the driver flaw to take the box. The 7.0 score reflects the high attack complexity, because race conditions are fiddly. The exploit has to be thrown over and over until the timing lands. Someone is clearly landing it anyway.”\n\nCVE-2026-62832 is another privilege escalation flaw that Microsoft has labeled likely to be exploited; this flaw, in the Windows User Profile Service, may be related to the recent “LegacyHive” public disclosure from the prolific bug hunter known as Nightmare Eclipse. The other publicly disclosed flaw is CVE-2026-72971, a low-impact local tampering vulnerability that Microsoft reckons is unlikely to be exploited.\n\nOther major software makers are likewise increasing their patch volumes and cadence thanks to AI, including Adobe which last month moved to twice-monthly security bulletins published on the 2nd and 4th Tuesday of each month. Cisco, Google, Mozilla and Oracle also are shipping updates far more frequently and abundantly.\n\nBy all accounts, AI is quite good at finding security holes in software. But for now at least, patching the resulting bugpocalypse remains a heavily human-centric endeavor, and the jury is still out on whether AI technologies will turn out to be as good at fixing vulnerabilities as they are at finding and exploiting them. This is an important question when one considers that these same AI technologies also are suggesting fixes for the vulnerabilities they find.\n\nResearchers at 1Password recently examined what happens when different large language models (LLMs) generate vulnerability patches for newly disclosed, complex vulnerabilities. They found the LLMs produced patches that failed to fix the flaw or added a new weakness in the process (or both) more than half the time.\n\nEd Skoudis, president of the SANS Technology Institute, said his team has seen excellent results using AI to generate patches, provided there are humans in the loop to test the suggested fixes and push for iterative improvements.\n\n“AI is rapidly becoming astonishingly good at finding vulnerabilities, but this research shows that fixing them is a very different problem,” Skoudis wrote in a SANS newsletter today. “Don’t expect one-shot AI patching to work reliably. Instead, iterate, test, challenge, improve, and verify. AI can be an extraordinary patching partner, but today it still needs a skilled human at the keyboard.”\n\nTyler Reguly at Fortra says while reports of Microsoft patching hundreds of vulnerabilities in one go has some organizations struggling to patch faster, it’s important to bear in mind that only one of the almost 400 bugs addressed today is known to be actively exploited. Reguly suggested security leaders check in with their teams to see how they’re handling the increasing workloads, which often involve testing fixes before deploying them in production environments.\n\n“If you’re a chief security officer talk to your teams about how they are shifting or modifying their workflows to better accommodate the patching shift that we’re seeing and support them across various organizational units by enabling the changes they want to see made,” Reguly said. “There\u2019s no need to rush these updates, no matter what various vendors and organizations try to tell you. You need to make sure that you are rolling out safe updates that will not negatively impact your systems.”\n\nSpeaking of the humans behind the keyboards, don’t neglect to backup your system and/or data before applying this month’s monster patch load. The day after each month’s Patch Tuesday is sometimes derisively referred to as Reboot Wednesday, but it generally doesn’t hurt to wait a few days to apply these huge update bundles because it sometimes takes a couple of days for the occasional misbehaving patch to get ironed out properly by Microsoft.\n\nFor a clickable, per-patch breakdown by severity and urgency, check out this roundup from the SANS Internet Storm Center.", "creation_timestamp": "2026-08-11T22:01:43.568718Z"}, {"uuid": "f7c76e8b-610d-4897-a793-a5217db284d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-20T03:00:05.566706Z"}, {"uuid": "7d3e138c-4af6-4e70-83a5-892c435b02d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62147", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mql6kor4qy27", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62147 \u0432 Tempo Operator: \u0443\u0433\u0440\u043e\u0437\u044b \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/F9A3E57F-938D-42AF-A436-642AFA4482C5", "creation_timestamp": "2026-07-14T02:40:30.441501Z"}, {"uuid": "5d59f206-2dee-4c4f-b671-50f5b1dec9c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlbxpp4fp2j", "content": "CVE-2026-62390: Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API", "creation_timestamp": "2026-07-14T03:41:28.426497Z"}, {"uuid": "d8e683f5-fdf5-4c3a-a863-0e817a68ec9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqle5fo5ev23", "content": "CVE-2026-62392: Apache Kylin: OS Command Injection via Async Query API", "creation_timestamp": "2026-07-14T04:20:27.364525Z"}, {"uuid": "5f72c591-83cf-4215-b2ad-ed08b46182a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqlfb7cxfr2q", "content": "CVE-2026-62393: Apache Kylin: Improper authorization in job information retrieval", "creation_timestamp": "2026-07-14T04:40:28.144791Z"}, {"uuid": "7658de87-c0f7-4cc8-99db-c8892ef435ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117078490129345513", "content": "\ud83e\udd16 Microsoft August 2026 Patch Tuesday fixes 400 flaws incl. 3 zero-days. Actively exploited: CVE-2026-68820 \u2014 AFD.sys EoP to SYSTEM, used by Lazarus (per Check Point) to deploy malware. Also patched: LegacyHive (CVE-2026-62832) and CVE-2026-72971 EoP.\ud83d\udd17 https://www.bleepingcomputer.com/news/microsoft/microsoft-august-2026-patch-tuesday-fixes-400-flaws-3-zero-days/#CVE #0day #PatchTuesday #CyberSec", "creation_timestamp": "2026-08-11T22:23:33.381713Z"}, {"uuid": "48367460-8a59-4bdc-92af-1f035b66ead3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqlzlfbgoz2d", "content": "CVE-2026-62422 - youtrack\nAn old version of YouTrack allowed attackers to bypass authentication and gain access to administrative features by directly accessing the database. This could have allowed\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#youtrack #jetbrains #CVE #infosec", "creation_timestamp": "2026-07-14T10:44:04.948668Z"}, {"uuid": "558d0989-3a91-419c-8c96-46e3814bc463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62834", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkhugnsa62p", "content": "\ud83d\udea8 CVE-2026-62834 \u2014 CVSS 9.3 CRITICAL\n\nImproper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to e...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62834\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T00:09:55.922526Z"}, {"uuid": "26eed412-7661-47bc-b153-2d9cf7e1d89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5bcqjlj27", "content": "CVE-2026-62422 - JetBrains YouTrack Authentication Bypass via Database Access\nCVE ID : CVE-2026-62422\n \n Published : July 14, 2026, 11:16 a.m. | 14\u00a0minutes ago\n \n Description : In JetBrains YouTrack before 2026.1.13757,\n2025.3.148033,\n2025.2.148048,\n2025.1.148120,\n2024.3.14843...", "creation_timestamp": "2026-07-14T11:50:01.735545Z"}, {"uuid": "9871b896-3943-41ec-84a9-9b46774c897c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116918228655494378", "content": "CVE-2026-62187 - Privilege Escalation in Openclaw Feishu tools. Bypasses per-account disablement allowing unauthorized actions. CVSS 8.1. Update to v2026.6.9 immediately. #CVE #Openclaw #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62187/", "creation_timestamp": "2026-07-14T12:03:09.511555Z"}, {"uuid": "0c7f9c3d-da76-49c4-b74d-0251ac20654f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqm5ydioea2n", "content": "CVE-2026-62187 - Privilege Escalation in Openclaw Feishu tools. Bypasses per-account disablement allowing unauthorized actions. CVSS 8.1. Update to v2026.6.9 immediately. #CVE #Openclaw #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62187/", "creation_timestamp": "2026-07-14T12:03:09.540799Z"}, {"uuid": "70019254-e207-4a71-901c-dbd6db6ed851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://gist.github.com/alon710/64a84b16b48a0327d43d9cf3f2891634", "content": "# CVE-2026-62897: CVE-2026-62897: Integer Overflow and Code Execution in .NET WPF and WinForms\n\n> **CVSS Score:** 7.0\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62897\n\n## Summary\nAn integer overflow vulnerability (CWE-190) exists in the layout and rendering engines of the Microsoft .NET Framework and .NET Core. This flaw resides within the processing of complex coordinate maps, font tables, and image metadata in Windows Presentation Foundation (WPF) and Windows Forms (WinForms). By convincing a user to open a crafted vector graphic or layout document, a local attacker can exploit this arithmetic error to induce an undersized memory allocation, leading to a heap-based buffer overflow and subsequent arbitrary code execution within the context of the vulnerable application.\n\n## TL;DR\nAn integer overflow in .NET's WPF and WinForms rendering components allows local attackers to execute arbitrary code via malformed layout or graphic data.\n\n## Technical Details\n\n- **CWE ID**: CWE-190 (Integer Overflow or Wraparound)\n- **Attack Vector**: Local (AV:L)\n- **CVSS v3.1 Score**: 7.0 (High)\n- **Exploit Status**: None (No public exploits or PoCs available)\n- **KEV Status**: Not listed in CISA Known Exploited Vulnerabilities catalog\n- **Primary Impact**: Local Arbitrary Code Execution\n\n## Affected Systems\n\n- Microsoft .NET 10.0\n- Microsoft .NET 9.0\n- Microsoft .NET 8.0\n- Microsoft .NET Framework 3.5\n- Microsoft .NET Framework 4.7.2\n- Microsoft .NET Framework 4.8\n- Microsoft .NET Framework 4.8.1\n- Microsoft Visual Studio 2022\n- Microsoft Visual Studio 2026\n- **.NET**: 10.0.0 to < 10.0.11 (Fixed in: `10.0.11`)\n- **.NET**: 9.0.0 to < 9.0.19 (Fixed in: `9.0.19`)\n- **.NET**: 8.0.0 to < 8.0.30 (Fixed in: `8.0.30`)\n- **Visual Studio 2022**: 17.14.0 to < 17.14.38 (Fixed in: `17.14.38`)\n- **Visual Studio 2026**: 18.0 to < 18.8.3 (Fixed in: `18.8.3`)\n\n## Mitigation\n\n- Apply Microsoft's official servicing security updates for .NET, .NET Framework, and Visual Studio\n- Validate dimensions and scale factors of user-supplied assets before processing them in drawing contexts\n- Use safe integer libraries or checked contexts in custom math logic to prevent arithmetic overflows\n\n**Remediation Steps:**\n1. Identify all deployed versions of .NET, .NET Framework, and Visual Studio in the environment\n2. Apply Microsoft's August 2026 security updates to bring the components to the fixed versions\n3. For custom applications, wrap potentially unsafe coordinate math in checked blocks to catch overflows\n\n## References\n\n- [Microsoft MSRC Security Update Guide for CVE-2026-62897](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62897)\n- [Official CVE Record (CVE.org)](https://www.cve.org/CVERecord?id=CVE-2026-62897)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62897) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-11T22:32:27.220656Z"}, {"uuid": "f1c0d13f-7a61-48af-9363-c1f26889b552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62186", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqmeoeeuin2e", "content": "CVE-2026-62186 - Authorization bypass in Openclaw before 2026.6.8. Lower-trust callers can exploit HTTP model overrides to bypass admin controls. CVSS 7.6. No patch yet. Harden your input validation and access controls immediately. #CVE #in...\n\nhttps://www.valtersit.com/cve/CVE-2026-62186/", "creation_timestamp": "2026-07-14T14:02:35.651788Z"}, {"uuid": "f2e12217-6aed-4e56-bb9d-55f56623b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62186", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116918699311489381", "content": "CVE-2026-62186 - Authorization bypass in Openclaw before 2026.6.8. Lower-trust callers can exploit HTTP model overrides to bypass admin controls. CVSS 7.6. No patch yet. Harden your input validation and access controls immediately. #CVE #infosec #Openclaw\nhttps://www.valtersit.com/cve/CVE-2026-62186/", "creation_timestamp": "2026-07-14T14:02:51.138633Z"}, {"uuid": "8da7c517-2cd2-4bd2-9beb-32e571839a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqmqeyjaxl2z", "content": "CVE-2026-62390 - apache kylin\nApache Kylin versions 4 through 5.0.3 are at risk of a security threat. An attacker could potentially inject malicious SQL code, which could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachekylin #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-14T17:32:06.000111Z"}, {"uuid": "c532cc72-4b1c-4e28-8fa9-076d639ef5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "exploited", "source": "https://t.me/true_secator/8501", "content": "Microsoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 PatchTuesday \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2026 \u0433\u043e\u0434\u0430, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u043e\u043a\u043e\u043b\u043e 400, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0438 \u0434\u0432\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 0-day.\n \n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 37 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0430 5 - EoP. \u0420\u0430\u0441\u043a\u043b\u0430\u0434 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:  176 - EoP, 11 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 110 - RCE, 86 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 - \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Mariner, Microsoft Teams, Microsoft Azure, Microsoft Entra, Microsoft Office \u0438 Power Apps, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Microsoft \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 0-day:\n\n- CVE-2026-68820: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Windows \u0434\u043b\u044f WinSock, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u041c\u043e\u0448\u0435 \u041c\u0430\u0440\u0435\u043b\u0443\u0441\u0443 \u0438 \u0414\u0430\u0432\u0438\u0434\u0443 \u0414\u0440\u0438\u043a\u0435\u0440\u0443 \u0438\u0437 Checkpoint. \u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 Lazarus \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b CVE-2026-68820 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Microsoft AFD.sys \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 FudModule, \u0440\u0443\u0442\u043a\u0438\u0442\u0430 \u0434\u043b\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u044f\u0434\u0440\u0430.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2026-62832: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0435\u0440\u0435\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u0443 (\u00ab\u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\u00bb) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u043e \u0434\u0435\u0442\u0430\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441\u00a00-day \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LegacyHive,\u00a0\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse.\n\n\u0423\u0438\u043b\u043b \u0414\u043e\u0440\u043c\u0430\u043d\u043d \u0438\u0437 Tharros \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u043b, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LegacyHive \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n- CVE-2026-72971: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0441\u0442\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Windows (unionfs.sys). Microsoft \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0442\u043e\u043c, \u0433\u0434\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 yhw \u0438 txz.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0435\u044e \u0441\u0438\u0441\u0442\u0435\u043c - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-08-14T00:00:09.274933Z"}, {"uuid": "c38ad95d-f4cc-444d-bc8b-9fd7496af85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "Telegram/p4lssD2r3oSedXIz02RqCBsvQICDpdDZh6inSefTC1cUqJE", "content": "", "creation_timestamp": "2026-08-21T00:00:10.964023Z"}, {"uuid": "f5de63f4-94db-492c-8c79-a6a4adf7e0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97618", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 0p5cur\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 18:51:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-24061's poc\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T00:00:07.396468Z"}, {"uuid": "1788d321-86fc-4ca5-8002-20e5f46b9507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62988", "type": "published-proof-of-concept", "source": "Telegram/T_XByhyA_HALLjU76evu5RVvsn4zpzLoBf6fuRO_NOvcY2o", "content": "", "creation_timestamp": "2026-08-21T00:00:11.858731Z"}, {"uuid": "d79f3198-7aff-4036-aaf8-c1792189b9d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mstt4whift27", "content": "\ud83d\udea8 EUVD-2026-56679\n\ud83d\udcca 7.8/10\n\ud83c\udfe2 Microsoft\n\n\ud83d\udcdd Microsoft Security Advisory CVE-2026-62871 \u2013 .NET Elevation of Privilege Vulnerability\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56679\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-08-12T00:00:18.316435Z"}, {"uuid": "f83b4327-219f-4d3b-96f7-21e07bea545e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62988", "type": "seen", "source": "https://gist.github.com/alon710/0cc60371850e568781debde747fcbd5a", "content": "# CVE-2026-62988: CVE-2026-62988: Multi-Factor Authentication and Credential Bypass in Froxlor API\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-08-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62988\n\n## Summary\nAn insecure data retrieval flaw in the Froxlor server administration panel API allows authenticated remote attackers to retrieve unredacted bcrypt password hashes and Base32-encoded Time-Based One-Time Password (TOTP) seeds. Affected endpoints include several 'get' and 'listing' handlers for customers, administrators, and FTP accounts. Utilizing these leaked parameters, attackers can crack the password hashes offline and concurrently generate valid second-factor authentication codes to completely bypass access controls.\n\n## TL;DR\nFroxlor API endpoints leak raw bcrypt password hashes and raw TOTP seeds to authenticated users, enabling complete multi-factor authentication bypass and administrative takeover.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 9.0 (Critical)\n- **Exploit Status**: Proof of Concept (PoC) documented\n- **CISA KEV Status**: Not Listed\n- **Impact**: Authentication Bypass and Account Takeover\n\n## Affected Systems\n\n- Froxlor Server Administration Panel\n- **froxlor**: >= 2.3.7, < 2.3.8 (Fixed in: `2.3.8`)\n\n## Mitigation\n\n- Upgrade Froxlor to version 2.3.8 or later immediately.\n- Manually apply hotfix commits to strip password and data_2fa parameters on non-internal API calls.\n- Invalidate and regenerate all user and administrator passwords and 2FA TOTP seeds.\n- Implement WAF rules to inspect API responses for patterns resembling bcrypt hashes and Base32 TOTP seeds.\n\n**Remediation Steps:**\n1. Step 1: Backup the Froxlor database and installation files.\n2. Step 2: Update the codebase to version 2.3.8 or apply the manual patches from commit 8667fa3a4d77d6e322b7b8f7b9edbc1613ab5797.\n3. Step 3: Force a password reset for all administrators and customer accounts.\n4. Step 4: Instruct users to re-enroll their multi-factor authentication profiles to invalidate any potentially leaked TOTP seeds.\n5. Step 5: Review application logs for unauthorized API access targeting user get and listing commands.\n\n## References\n\n- [Official GitHub Advisory](https://github.com/froxlor/froxlor/security/advisories/GHSA-7788-ghfq-c6mh)\n- [NVD Record](https://nvd.nist.gov/vuln/detail/CVE-2026-62988)\n- [CVE.org Authority Record](https://www.cve.org/CVERecord?id=CVE-2026-62988)\n- [Remediation Release Tag](https://github.com/froxlor/froxlor/releases/tag/2.3.8)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62988) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-19T10:31:45.393015Z"}, {"uuid": "7ccd64b8-7767-4587-9887-cf7e44e396bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3msttak7nrl25", "content": "\ud83d\udea8 EUVD-2026-56679\n\ud83d\udcca 7.8/10\n\ud83c\udfe2 Microsoft\n\n\ud83d\udcdd Microsoft Security Advisory CVE-2026-62871 \u2013 .NET Elevation of Privilege Vulnerability\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56679\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-08-12T00:02:19.709852Z"}, {"uuid": "679c4588-1b38-4c6d-a1c9-771d1daabcdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3msttauzlw723", "content": "\ud83d\udea8 EUVD-2026-56410\n\ud83d\udcca 6.5/10\n\ud83c\udfe2 Microsoft\n\n\ud83d\udcdd Microsoft Security Advisory CVE-2026-62902 \u2013 .NET Information Disclosure Vulnerability\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-56410\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-08-12T00:02:30.856172Z"}, {"uuid": "af6f92b7-28bc-491c-a949-8252e06c9f53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://gist.github.com/alon710/1bbb962ba5fe1e0ea9ceba5b2cf3a088", "content": "# CVE-2026-62909: CVE-2026-62909: .NET Local Elevation of Privilege via Unchecked Diagnostic Socket Permissions\n\n> **CVSS Score:** 7.8\n> **Published:** 2026-08-11\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62909\n\n## Summary\nA high-severity Local Elevation of Privilege (EoP) vulnerability exists in the Microsoft .NET runtime and Visual Studio on Unix-like platforms. The flaw arises from an unchecked return value (CWE-252) during the initialization of the Diagnostics Inter-Process Communication (IPC) socket. By exploiting this vulnerability, a low-privileged local attacker can execute arbitrary commands with the privileges of a higher-privileged .NET process.\n\n## TL;DR\nAn unchecked return value on permission-setting system calls for Unix Domain Sockets in the .NET runtime allows local privilege escalation to root on macOS and Linux.\n\n## Technical Details\n\n- **CWE ID**: CWE-252\n- **Attack Vector**: Local (AV:L)\n- **CVSS**: 7.8 (High)\n- **Impact**: Local Elevation of Privilege\n- **Exploit Status**: None (No weaponized public PoCs)\n- **KEV Status**: Not listed\n\n## Affected Systems\n\n- .NET 10.0\n- .NET 9.0\n- .NET 8.0\n- Visual Studio 2022\n- Visual Studio 2026\n\n## Mitigation\n\n- Upgrade the .NET runtime environment to a non-vulnerable servicing release.\n- Apply restrictive process umask policies (0077) to ensure safe default socket creation parameters.\n- Relocate diagnostic socket generation folders to directories with restricted user-only access.\n- Disable the .NET diagnostics server endpoint completely in workloads where debugging is not required.\n\n**Remediation Steps:**\n1. Identify active .NET deployment runtimes across Unix-like container hosts and Virtual Machines.\n2. Apply the platform-specific patch updating .NET 10.0 to 10.0.11, .NET 9.0 to 9.0.19, or .NET 8.0 to 8.0.30.\n3. For temporary containment, set the system environment variable DOTNET_EnableDiagnostics=0 on production hosts.\n\n## References\n\n- [Microsoft Security Response Center Advisory](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62909)\n- [CVE Record](https://www.cve.org/CVERecord?id=CVE-2026-62909)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62909) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T00:32:54.128061Z"}, {"uuid": "b69fad4d-b158-489f-9793-f2f79721e7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88622", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-6279.py\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 87achrafg-stack\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-13 11:40:04\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-6279\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:05.633400Z"}, {"uuid": "8f616d39-a5e5-41cf-9fd1-67e6b2819c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mte67oyxbr2r", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-62901 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/659 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-08-18T12:01:18.308641Z"}, {"uuid": "a83c3304-a482-49b4-9106-8544476f6748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mte67r4lbt24", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-62899 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/660 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-08-18T12:01:20.372672Z"}, {"uuid": "9aa95c97-d281-4c68-bffc-e7ba034a6ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mte67rt7zt2t", "content": "\ud83d\udd0d Lambda Watchdog detected that CVE-2026-62909 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/661 #AWS #Lambda #Security #CVE #DevOps #SecOps", "creation_timestamp": "2026-08-18T12:01:21.026114Z"}, {"uuid": "19aad4f0-2435-4b90-b405-1b9b57158d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62893", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:35.096851Z"}, {"uuid": "3155df43-24a5-4002-8aea-042c46832ce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62815", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:35.301652Z"}, {"uuid": "e47947d6-7817-4158-9be9-4b64455dcf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:37.893260Z"}, {"uuid": "74b90fc1-06e9-4d1e-89fd-660d9bb158d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:34.852751Z"}, {"uuid": "22e1ecd1-26b2-4033-8079-1fcda80b566a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62830", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:38.117260Z"}, {"uuid": "e93b4014-a508-431d-af9d-12d3fe93f2ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62823", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:45.989099Z"}, {"uuid": "def9b9b6-9c6c-4196-8db1-944136a55b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62820", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:46.545234Z"}, {"uuid": "fc3373da-f803-4b89-8e0d-6b4e10e972e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62886", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:49.063843Z"}, {"uuid": "c2656c6f-7d03-4665-84b0-99ea4bf8331f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:35.791179Z"}, {"uuid": "023b6b88-d7e1-4338-a2d9-274d613de7d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62869", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:36.817109Z"}, {"uuid": "4c9e2d61-c02e-4bad-9c61-a037fa0527f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:36.030137Z"}, {"uuid": "4e17d275-1ec0-45f4-9fb3-e006a882bd27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62818", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:45.304255Z"}, {"uuid": "b59cc1d7-aacb-4b4a-bfff-a1319730bd99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62816", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:47.667113Z"}, {"uuid": "b8638c8d-c420-4093-ad97-c6ee6d8ebabf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62909", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:49.245176Z"}, {"uuid": "a732b1fd-373e-42df-817d-3c7a472c8d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62872", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:49.461805Z"}, {"uuid": "ee59bb75-0f51-405d-9867-8170cadd7b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62900", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:50.120347Z"}, {"uuid": "5b985a61-153a-4fcf-865c-22d6d56b6506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62902", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:50.344004Z"}, {"uuid": "87fe2377-3f22-4c84-8609-780042d50cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62873", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:38.284843Z"}, {"uuid": "2a59abcc-c148-431c-aeea-3b135f6f6756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62819", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:47.864409Z"}, {"uuid": "05e5a7d3-1e05-4c76-9a75-6cf1d11c15f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62889", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:48.037428Z"}, {"uuid": "fa036b32-5928-4f85-b9a4-9b4f160711f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62901", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:48.413134Z"}, {"uuid": "e805d219-5bb0-4cd2-b99a-8336e7b3e168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62898", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:51.251678Z"}, {"uuid": "e71009a5-a104-430a-8e3d-b6e55a0560f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62824", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:45.116676Z"}, {"uuid": "993bdaf1-a821-4dee-862a-113117f9b1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62822", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:47.168371Z"}, {"uuid": "5831a6a0-892c-4ed9-8427-958b2df9a12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62871", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:48.845685Z"}, {"uuid": "a398cb77-d0f3-47cf-836d-0d926eec8244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:44.544492Z"}, {"uuid": "f01ec8c6-d44a-42a6-8d8a-535a425142a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:44.952849Z"}, {"uuid": "af378457-12cb-47b0-aa96-3ef7ed191253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62915", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:03.102349Z"}, {"uuid": "b132669a-07bb-44da-8800-850d7d799251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:04.257817Z"}, {"uuid": "ca711cbc-2ef8-4b86-87fe-439268aaefd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62728", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:29.972805Z"}, {"uuid": "0fc8fd90-b8bc-419a-97b5-2ad0bc427852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62736", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:31.540537Z"}, {"uuid": "122bc2a5-c608-4c60-8b3e-434ca97879b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62755", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:31.783004Z"}, {"uuid": "c220df91-59c6-4cfa-9c75-23ed0069d010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62817", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:46.285398Z"}, {"uuid": "47ca9398-953f-46fb-8def-a23aacf7b8c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62890", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:46.949390Z"}, {"uuid": "bae409d5-ec91-4651-bd1c-774ea34909dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62892", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:52.578904Z"}, {"uuid": "c45f93e1-bcb0-4fb3-87f9-d7db6ddbae05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62996", "type": "published-proof-of-concept", "source": "https://github.com/smarty-php/smarty/security/advisories/GHSA-rjhh-76wf-8xmw", "content": "", "creation_timestamp": "2026-08-07T16:35:38.291520Z"}, {"uuid": "2c9aad76-a072-4eb8-8495-13808b709288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:43.931938Z"}, {"uuid": "1d11ae6d-e516-4f39-8c6c-6e86cbb6c6e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62897", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:49.930319Z"}, {"uuid": "673bfce9-d121-4969-9350-07964102479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62899", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:50.536412Z"}, {"uuid": "b66e0361-cc00-4e4d-ae10-73b80431f563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62784", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:03.831121Z"}, {"uuid": "ddb82b5a-d095-45c8-9456-d3c3213e26ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62698", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:00:55.593059Z"}, {"uuid": "f0aa912e-ad1e-4f3b-b5da-f4968f1de81f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62913", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:02.857664Z"}, {"uuid": "66fe9ce5-1736-46d7-a72f-b0210763d7f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62914", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:03.281367Z"}, {"uuid": "405e0955-09c1-436e-9add-553e2dd95030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mszavpg3qk2u", "content": "\ud83e\udd16 CVE-2026-62832: Microsoft patches \"LegacyHive\", Windows zero-day LPE in User Profile Service. Non-admins could get code execution at admin login. Fixed in August Patch Tuesday.\nhttps://www.bleepingcomputer.com/news/microsoft/microsoft-patches-legacyhive-windows-zero-day-vulnerability/", "creation_timestamp": "2026-08-14T03:50:06.947973Z"}, {"uuid": "630b0be3-0bcc-4394-96ff-32aab666faa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62912", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:02.185958Z"}, {"uuid": "9777c302-10a1-4db9-a4f5-f99aa5d6bcb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62910", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:02.404517Z"}, {"uuid": "80f10d5e-ad00-410f-a134-f2a224e6623d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62743", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:25.304439Z"}, {"uuid": "aa4f8ca3-1432-479f-b5cf-b792d57fe3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62908", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:28.603228Z"}, {"uuid": "554c0a28-724c-41b4-844b-e160bbf9e1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62742", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:34.445164Z"}, {"uuid": "06152f3c-c29d-407a-b906-0dd5eb15e00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62740", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:42.768143Z"}, {"uuid": "b5ed80ad-fda3-4d62-afa3-1f0542ab947e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62752", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:45.758054Z"}, {"uuid": "c1666778-9bc7-4221-aa85-bd12c86ac8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62766", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:46.138162Z"}, {"uuid": "a1ae85e1-041c-4e1e-8be3-42b3d6a61b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:14.964472Z"}, {"uuid": "01bb0bd0-2854-4aef-8b56-187f5e90b3bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62739", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:41.775200Z"}, {"uuid": "aa6221bd-964a-4bf4-a72c-8f854f256125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62753", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:42.213320Z"}, {"uuid": "60945e5c-c9ac-491f-b089-0211967ce477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:47.092917Z"}, {"uuid": "f1e10d50-5e37-40bd-b7b8-4515dd44db6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62749", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:47.278243Z"}, {"uuid": "fe63975c-95bf-47c0-8c29-06bc58efeced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62780", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:47.452664Z"}, {"uuid": "7b3258e7-1f12-4371-b589-01e4895c8e1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62788", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:47.649771Z"}, {"uuid": "ad4c499e-e6bc-4fe5-8e66-69c123caad69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62738", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:48.863866Z"}, {"uuid": "968ff49f-edf9-40cd-aceb-e6c447267b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62700", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:51.170786Z"}, {"uuid": "dcf706e7-d139-4adf-a8f1-ed5659f10e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62880", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:51.498311Z"}, {"uuid": "ca1fa4d1-1beb-4bf8-bf01-69fb7abd3e3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62793", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:51.880044Z"}, {"uuid": "bd32b9f2-68fb-4c20-980f-a9bd4b5f8e85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62796", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:52.132231Z"}, {"uuid": "458c9302-fcd8-4232-a5b3-bbdbb1256878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62887", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:52.310619Z"}, {"uuid": "e15c3436-f5c6-4780-afa4-ab518b21b72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62696", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:52.995343Z"}, {"uuid": "5f8dd39f-ba8f-42a5-90b5-ab8768ae2c3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62779", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:55.827003Z"}, {"uuid": "0d77090f-cdba-462e-a321-55fa19f35943", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62757", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:55.990109Z"}, {"uuid": "6e7a2f5a-fbda-431b-96fe-19f1bce547b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62770", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:56.335538Z"}, {"uuid": "04188d35-2425-4239-88f5-9a2f86b5046d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62782", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:56.770698Z"}, {"uuid": "a37bc9aa-4a1a-4d05-b481-bd9b7fd029a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62790", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:57.162857Z"}, {"uuid": "21335457-8086-4b3d-836d-feb128e36d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:15.182932Z"}, {"uuid": "2b20b7d2-c41c-4911-8894-488842ee59c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:10.538928Z"}, {"uuid": "fdd1413a-90f3-4014-8e1f-1944c39b5ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:12.985847Z"}, {"uuid": "d11a7185-a9a0-48e1-ae2b-d2d3c01e2570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62705", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:29.173674Z"}, {"uuid": "ac82e53f-c3e5-41b7-a4b5-f2f0ba2b4d3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62713", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:29.631504Z"}, {"uuid": "0d0a6e59-da52-4e04-8d4a-0f604b09c8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62771", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:29.804765Z"}, {"uuid": "72478bfc-2259-4228-912b-6a3bcfdccb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62775", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:30.321670Z"}, {"uuid": "3988fee1-6cea-428a-95a8-0bbc7e343ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:15.475531Z"}, {"uuid": "0ca3c62f-e3fc-4392-86ff-afac1a22472b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62781", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:23.044727Z"}, {"uuid": "832b227a-ae07-43bf-98b2-30bdc7c2498b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62769", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:35.339301Z"}, {"uuid": "2d923c1b-e8e6-42dc-862e-a6b71940a1d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62758", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:53.491507Z"}, {"uuid": "d16a9ce3-ca64-4485-9c3a-78793d1f5e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62723", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:59.233730Z"}, {"uuid": "c9a900c0-7d6e-4a2e-927a-c16d6bfc3f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62724", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:59.401866Z"}, {"uuid": "e79183e2-215e-4d64-aca8-fb6cd5fb9a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62726", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:59.800359Z"}, {"uuid": "33e7fe4a-a61e-4ad5-80c9-15b68f416856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62732", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:00.239435Z"}, {"uuid": "1b4c654d-b932-463b-8d73-28f0b3cac3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62748", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:00.626288Z"}, {"uuid": "802d065b-1cff-406e-9e98-a4feb32b8d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62699", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:00.791194Z"}, {"uuid": "d3f1fe5e-a2eb-47e8-a597-40ae5cc72737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:02:01.114771Z"}, {"uuid": "9580ac3d-b495-4ab8-9953-01e329e27300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62746", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:25.518924Z"}, {"uuid": "8ab8b812-6a19-4bff-838f-00f2631d0a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62786", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:25.745655Z"}, {"uuid": "75d5bcc5-8fa5-4779-8b19-3d2f715cad8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62798", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:25.975579Z"}, {"uuid": "2fb66e43-ba9e-418a-abb8-598a455dfaba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62776", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:32.472471Z"}, {"uuid": "95af9f22-d0bf-4460-b632-30ee2d1529b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62807", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:32.961197Z"}, {"uuid": "bc347cf4-6856-44d3-b492-b721276fa36d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62787", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:37.354915Z"}, {"uuid": "45c11789-189c-42b6-9500-cdeb909e8b75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62703", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:38.454439Z"}, {"uuid": "ac3b1279-87d3-4201-89a6-e369938a4286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62719", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:49.520369Z"}, {"uuid": "6ae566aa-e7f5-426c-a380-f7a434352824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62693", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:50.230921Z"}, {"uuid": "fbe31a67-4d82-4936-aaa6-042394c2c46e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62772", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:30.158179Z"}, {"uuid": "3d0ca372-e3d5-4f73-9d2c-4113ab4bb81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62717", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:49.310301Z"}, {"uuid": "56387f9a-d5e7-481d-bd12-2787517d7c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62688", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:50.005576Z"}, {"uuid": "18fb6b08-213b-4ce8-96c0-6f9dcbcb2e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62707", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:50.406991Z"}, {"uuid": "8de530bb-8304-46bc-abd7-4be0c0cfbd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62692", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:55.669027Z"}, {"uuid": "4bd1bc29-4548-4bf6-a743-37be47046a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62799", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:56.541714Z"}, {"uuid": "4bb68d51-8bbf-4c3b-99ec-e4481907cad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62722", "type": "seen", "source": "https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review", "content": "I\u2019ve successfully survived Hacker Summer Camp, and I have returned with a new outlook on patch density. When even Linus Torvalds says that huge updates are the \u201cnew normal\u201d, it\u2019s time to readjust what we consider a true bug apocalypse. This month\u2019s release is thankfully smaller than last months, but still huge by historical standards. Take a break from your regularly scheduled activities as we let\u2019s take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for August 2026\nFor the first part of the August release, Adobe released five bulletins addressing 51 unique CVEs in Adobe ColdFusion, Commerce, Lightroom Classic, Content Credentials SDK, and Adobe Campaign Classic.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for August 2026\n\n\n\n  \nAdobe Patches for August 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-90\n        Adobe ColdFusion\n        15\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-123\n        Adobe Campaign Classic\n        3\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-92\n        Adobe Commerce\n        7\n        Critical\n        9.1\n        No\n        2\n      \n      \n        APSB26-94\n        Adobe Lightroom Classic\n        11\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-111\n        Content Credentials SDK\n        15\n        Critical\n        7.5\n        No\n        3\n      \n      \n        TOTAL\n        5 bulletins\n        51\n        \n        \n        \n        \n      \n    \n  \n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nIf you\u2019re running Campaign Classic, that\u2019s your priority. Not only is it a deployment priority of 1, but it also contains two different CVSS 10 bugs and supersedes the patch that was just released on August 3. ColdFusion is also deployment priority 1 and also contains a CVSS 10 bug. Adobe Commerce rates a priority 2 with code execution bugs as high as CVSS 9.1. The patches for Lightroom Classic and Content Credentials SDK are packed with CVEs, but only rate a deployment priority of 3.\nNone of the Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for August 2026\nThere are a couple of things to point out right at the beginning. Again, counting is difficult due to the size, but I see 398 new CVEs to go along with the other updates documented this month. However, there is only one listed being under active attack, so we\u2019ve got that going for us, which is nice. The release impacts Windows and Windows components, Office and Office Components, AMD Zen, Azure and Azure Components, GitHub Copilot, Windows Defender, Exchange Server, SharePoint, OneDrive for macOS, Teams, Power BI, .NET and Visual Studio, DHCP Server and Client, DNS Server, and Windows TPM. Minecraft is absent from this release.  All told, there are 62 rated Critical, one rated Moderate, with the rest rated Important in severity. Eight of these bugs were submitted through the ZDI program.\nThis volume of updates indeed seems to be the new normal \u2013 at least for now. What is interesting is that, while there is an explosion of bugs being reported (and fixed), there has been no equivalent increase in the number of bugs being actively exploited, at least as 0-days.\nAgain, we\u2019ll start with the bug under active attack and move on from there. \n-              CVE-2026-68820 - Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityThis bug allows attackers to execute code at SYSTEM level. Bugs of this type are often paired with code execution bugs to take over a system, often through phishing or ransomware. One nitpick here: Microsoft lists the Exploit Code Maturity in the CVSS as \u201cUnproven\u201d but calls this out as actively exploited. Somewhere, that math ain\u2019t mathing.\n-              CVE-2026-62878 - Windows DNS Server Remote Code Execution VulnerabilityThere are several DNS-related patches this month, but this one stands out by far. It allows a remote, unauthenticated attacker to execute code with elevated privileges without user interaction. It\u2019s a good ol\u2019 fashioned stack-based buffer overflow that ends up wormable. Microsoft states exploitation is less likely, but I wouldn\u2019t count on that. I suggest testing and deploying this one quickly, especially to your Internet-facing DNS servers.\n -              CVE-2026-62893 - Windows Deployment Services TFTP Server Remote Code Execution VulnerabilityThis bug came through the ZDI program and allows for code execution without user authentication or user interaction. TFTP has no auth mechanism and is available remotely vid UDP port 69. Any WDS server serving Windows Imaging Format (WIM) files via TFTP (the standard PXE boot scenario) is vulnerable. The issue results from the lack of validating the existence of an object prior to performing operations on the object. UDP port 69 should be blocked at your perimeter, but this could easily be used by attackers for lateral movement within an enterprise. Again, test and deploy this one quickly if you\u2019re using WDS for deployments in your enterprise.\n -              CVE-2026-62815 - Microsoft QUIC Remote Code Execution VulnerabilityHere we have another remote, unauthenticated code execution bug that doesn\u2019t require user interaction. This one is in the QUIC component. If you aren\u2019t familiar with it, QUIC is an IETF-standardized transport protocol that runs over UDP instead of TCP, and it's the foundation for HTTP/3. Roughly 13.5 million websites rely on it. If you are one of those millions, test and deploy this patch rapidly.\n -              CVE-2026-59124 - Microsoft High Performance Computing (HPC) Pack Remote Code Execution VulnerabilityDon\u2019t let the Important severity rating fool you; this is still a CVSS 9.8 bug. It gets knocked down since HPC isn\u2019t on by default. However, it\u2019s a hugely growing segment, and this is another remote, unauthenticated code execution bug that does not require user interaction. It might not be applicable to everyone, but if you\u2019re using HPC in your environment, this is not one to sleep on, especially since Microsoft lists this as \u201cexploitation more likely\u201d.\n -              CVE-2026-62911 - Microsoft Exchange Server Elevation of Privilege VulnerabilityThere are several Exchange bugs in this release, but this one really stands out. It could allow a privilege escalation via an authentication bypass. If successful, an attacker could \u201ctake over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.\u201d This bug was one of the ones demonstrated at Pwn2Own Berlin, so ignore Microsoft\u2019s exploitability and Exploit Code Maturity ratings. We handed them working exploits, so this is a real threat. As always, test out those Exchange updates before deploying, but don\u2019t hurry up and schedule that downtime for your upgrade. \nHere\u2019s the full list of CVEs released by Microsoft for August 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-68820\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-62832\n  Windows User Profile\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  Yes\n  No\n  EoP\n \n \n  CVE-2026-49163 **\n  Application Insights\n  Profiler Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50481 **\n  Azure Active Directory\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68823 **\n  Azure Confidential\n  Ledger Remote Code Execution Vulnerability\n  Critical\n  9.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62869 **\n  Azure Entra ID\n  Spoofing Vulnerability\n  Critical\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-56161 **\n  Azure Logic Apps\n  Information Disclosure Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Info\n \n \n  CVE-2026-50515 **\n  Azure Service Bus\n  Remote Code Execution Vulnerability\n  Critical\n  9.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-56162 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-63522 **\n  Azure SQL Database\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62836 **\n  Azure SQL Managed\n  Instance Elevation of Privilege Vulnerability\n  Critical\n  8.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62830 **\n  Azure SRE Agent\n  Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-62873 **\n  Microsoft 365 Admin\n  Center Elevation of Privilege Vulnerability\n  Critical\n  9.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50516 **\n  Microsoft Azure\n  Kubernetes Service Elevation of Privilege Vulnerability\n  Critical\n  9.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-59115 **\n  Microsoft Entra\n  Provisioning Service Elevation of Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-68794\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68804\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68816\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62911\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-63513\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63519\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63526\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65664\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66807\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63515\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63532\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64903\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64909\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64910\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64911\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65657\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70130\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-70332 **\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Critical\n  9.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63518\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63525\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64907\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63508 **\n  Microsoft Planetary\n  Computer Pro Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-59118 **\n  Microsoft Power Apps\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-65668 **\n  Microsoft Purview\n  eDiscovery Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62815\n  Microsoft QUIC Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62827\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64921\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65665\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62896 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-65667 **\n  Microsoft Teams\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62918 **\n  Microsoft Teams\n  Spoofing Vulnerability\n  Critical\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62824\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62818\n  Windows Active\n  Directory Certificate Services (AD CS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62893\n  Windows Deployment\n  Services TFTP Server Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66802\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-71331\n  Windows Device Health\n  Attestation (DHA) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62823\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62817\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62820\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62878\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65789\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62890\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62822\n  Windows GDI+ Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65791\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66799\n  Windows Key Guard\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62816\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62819\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62889\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70354\n  .NET Core Remote Code\n  Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62901\n  .NET Denial of Service\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-58641\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62871\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62886\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62909\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62872\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65810\n  .NET Framework\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62897\n  .NET Framework Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62900\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-62902\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62899\n  .NET Security Feature\n  Bypass Vulnerability\n  Important\n  5.9\n  No\n  No\n  SFB\n \n \n  CVE-2026-65777\n  Active Directory\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-59130\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-59131\n  AMD Zen Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62898\n   Microsoft QUIC Information Disclosure\n  Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61357\n  Application\n  Information Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70340\n  Azure CycleCloud\n  Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-65806\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47299\n  Azure Monitor Agent\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-57104\n  Azure Storage Explorer\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62892\n  Capability Access\n  Management Service (camsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65675\n  CoPilot Chat Security\n  Feature Bypass Vulnerability\n  Important\n  7.1\n  No\n  No\n  SFB\n \n \n  CVE-2026-65786\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65787\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65788\n  Desktop Window Manager\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70335\n  GitHub Copilot and\n  Visual Studio Code Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-64906\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64908\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64912\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64914\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64919\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64920\n  Microsoft Access\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59136\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54123\n  Microsoft Defender for\n  Endpoint for Mac Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62698\n  Microsoft Digest\n  Authentication Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66301\n  Microsoft Dynamics 365\n  (On-Premises) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65815\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-40375\n  Microsoft Dynamics\n  Business Central Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65673\n  Microsoft Entra\n  Connect Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68797\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68799\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68802\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68808\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68813\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70318\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70327\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70328\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68793\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68795\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68796\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68798\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68800\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68801\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68803\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68805\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68806\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68807\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68810\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68811\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68812\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68814\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68815\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68817\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62912\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62910\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-65813\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  6.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-62913\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62915\n  Microsoft Exchange\n  Server Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62914\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-59133\n  Microsoft High\n  Performance Computing (HPC) Pack Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59124\n  Microsoft High\n  Performance Computing (HPC) Pack Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62784\n  Microsoft Local\n  Security Authority Server (lsasrv) Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68792\n  Microsoft Office\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62842\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63517\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66809\n  Microsoft Office\n  Graphics Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63524\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63529\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64899\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70314\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70315\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70317\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70323\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63533\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64904\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65656\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65661\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57105\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70306\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63521\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63528\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63530\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63531\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-64917\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66806\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66810\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70319\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63527\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64905\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-64915\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70311\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65680\n  Microsoft OneDrive for\n  MacOS Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70329\n  Microsoft Outlook\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62882\n  Microsoft Outlook\n  Spoofing Vulnerability\n  Important\n  4.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-70313\n  Microsoft PowerPoint\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70337\n  Microsoft PowerShell\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70338\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59138\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-61345\n  Microsoft Remote\n  Registry Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70324\n  Microsoft SharePoint\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70321\n  Microsoft SharePoint\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70326\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70355\n  Microsoft SharePoint\n  Server Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62837\n  Microsoft SharePoint\n  Server Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63514\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-63520\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-64901\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65658\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65663\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66805\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66808\n  Microsoft SharePoint\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58639\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62829\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62839\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-62917\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63516\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64897\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64900\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64902\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64916\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64922\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65660\n  Microsoft SharePoint\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-63512\n  Microsoft SharePoint\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-65767\n  Microsoft Teams for\n  Android and iOS Spoofing Vulnerability\n  Important\n  8.8\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-65769\n  Microsoft Teams iOS\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65768\n  Microsoft Teams Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66804\n  Microsoft Windows\n  Cross Device Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59135\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65814\n  Microsoft Windows\n  Storage Port Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70310\n  Microsoft Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-58651\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-6726 *\n  MITRE: CVE-2026-6726\n  TPM 2.0 Improper Object Slot Reuse\n  Important\n  7.9\n  No\n  No\n  \n \n \n  CVE-2026-6727 *\n  MITRE: CVE-2026-6727\n  TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability\n  Important\n  5.9\n  No\n  No\n  \n \n \n  CVE-2026-65811\n  Power BI Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68809\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70312\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70316\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70320\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70322\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70325\n  Powerpoint Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59119\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-58612\n  PowerShell Information\n  Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65671\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65672\n  Remote Access API\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-42976\n  Remote Access\n  Management service/API (RPC server) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59134\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61352\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61363\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-54113\n  Remote Procedure Call\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62781\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59125\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-47285\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54981\n  Visual Studio Code\n  Python Extension Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-59113\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69320\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70336\n  Visual Studio Code\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58650\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69278\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69306\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-62743\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62746\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62786\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62798\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61358\n  Windows Accessibility\n  Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-49179\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61348\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70307\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65778\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65779\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65780\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65781\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65782\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65783\n  Windows Autopilot\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62908\n  Windows Backup Engine\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61927\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61934\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62705\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62722\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62713\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62771\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62728\n  Windows Common Log\n  File System Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62772\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62775\n  Windows Container\n  Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72971\n   Windows Container Isolation FS Filter Driver\n  (unionfs.sys) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61936\n  Windows Defender\n  Firewall Service Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-62710\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62747\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65785\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62736\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62755\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61361\n  Windows DHCP Client\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-62761\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62776\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62803\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62807\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62812\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62714\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62715\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62716\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62718\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62720\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62742\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62745\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62814\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61923\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62769\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62778\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-62881\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62883\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65795\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65797\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65798\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65799\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70304\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70330\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61920\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  6.6\n  No\n  No\n  RCE\n \n \n  CVE-2026-62787\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-61932\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62888\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62894\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61933\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62703\n  Windows DWM Core\n  Library Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59128\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-59126\n  Windows Event Logging\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-59137\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61347\n  Windows Event Logging\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61360\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65662\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62709\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62702\n  Windows Graphics\n  Kernel Denial of Service Vulnerability\n  Important\n  6.8\n  No\n  No\n  DoS\n \n \n  CVE-2026-61346\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62774\n  Windows Graphics\n  Kernel Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61928\n  Windows Hello\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62750\n  Windows HTTP Protocol\n  Stack Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-61937\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62735\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62739\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62741\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62753\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62811\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61368\n  Windows Hyper-V\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-62740\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-54984\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-59127\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61925\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61938\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62768\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65774\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70344\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70345\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70346\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70347\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65681\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-65796\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-65679\n  Windows iSCSI Target\n  Service Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-62752\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62754\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62766\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62773\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61929\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61930\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62708\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-62737\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62749\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62780\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62788\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65773\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62785\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62795\n  Windows LDAP -\n  Lightweight Directory Access Protocol Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62777\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-50472\n  Windows LUA File\n  Virtualization Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62738\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70348\n  Windows Management\n  Services Denial of Service Vulnerability\n  Important\n  5.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62717\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62719\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65790\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62688\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62693\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62707\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-56174\n  Windows Narrator\n  Braille Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61366\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68819\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62700\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62797\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62880\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61350\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-62793\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62796\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62887\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65784\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68821\n  Windows Package\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-62696\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62751\n  Windows Projected File\n  System Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62690\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62758\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62783\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61918\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61921\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61924\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61356\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61364\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61365\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61367\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62692\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62779\n  Windows Schannel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62757\n  Windows Schannel\n  Security Feature Bypass Vulnerability\n  Important\n  5.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-61355\n  Windows Sensor Data\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62770\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62799\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62782\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-65794\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-62790\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62800\n  Windows SMBv3 Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61359\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62695\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-59132\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62792\n  Windows TCP/IP Remote\n  Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-59122\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-61353\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62701\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62723\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62724\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62725\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62726\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62729\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62732\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62734\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62748\n  Windows Telephony\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62699\n  Windows Universal Disk\n  Format File System Driver (UDFS) Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-61926\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62721\n  Windows User-Mode\n  Power Service (UMPS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62711\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62712\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62733\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62876\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62877\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-62885\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65678\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-65775\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65776\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62730\n  Windows Wired\n  AutoConfig Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-61349\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-61939\n  Winlogon Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56179\n  Windows\n  Network Address Translation (NAT) Spoofing Vulnerability\n  Moderate\n  8.3\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release, but assume there are details I miss that are relevant to your environment.\nLooking at the remaining Critical-rated patches, you are safe to ignore the scariest looking ones, including the CVSS 10\u2019s. These have already been mitigated by Microsoft and do not count towards today\u2019s total of 398. The iSCSI Target service, however, is a CVSS 9.8, but it\u2019s not installed by default. Microsoft notes a DHCP Server heap overflow and a SharePoint deserialization bug are both listed as \u201cexploitation more likely\u201d. That SharePoint bug brought two EoP siblings along for the ride. And what would a Patch Tuesday be without Preview Pane exploit vectors in Office components? There are many in August, although there are a few Office bugs listed as Critical but without the Preview Pane vector. Odd. Then there\u2019s the mid-tier pile no one is proud of, but everybody needs to patch anyway: AD CS, RRAS, SSTP, and a matched pair in Device Health Attestation, all leaning on higher attack complexity as their only saving grace. Consider this a coin flip, not a shield. The bug in RMCAST is unauthenticated but requires an adjacent attacker. The bug in Key Guard is a bit interesting, as it could lead to an attacker gaining Virtual Trust Level 1 (VTL1) privileges. The final Critical-rated bug is in the RDP client, but it requires a user to connect to a malicious RDP server.\nMoving on to the other code execution bugs, SharePoint alone accounts for seven of these, six of them the same deserialization-of-untrusted-data flaw repeated almost verbatim across different code paths, all needing only low-privilege auth and no interaction. The seventh is an input-validation miss that needs no auth at all, just a harder-to-pull-off attack chain. LDAP and SMBv3 each draw a matching pair of patches. The LDAP bugs are a heap overflow and a use-after-free, both needing a user to interact with something first; the SMBv3 pair is twin heap overflows. Visual Studio Code adds three of its own: missing authorization, OS command injection, and straight code injection, all requiring a user to open or run something. The AI-coding-tool-vuln-of-the-month tradition continues uninterrupted. The rest of the CVSS 8.1\u20138.8 tier is a grab bag with a common thread \u2014 LSASS and Exchange Server both go down to heap overflows with low-privilege access, Dynamics 365 On-Premises gets the SharePoint treatment (deserialization), and Active Directory Domain Services picks up a command-injection bug that needs a user's cooperation. Add one apiece for Teams, Power BI, Outlook, and a pair for Windows Media Foundation, plus a higher-complexity trio: RPC Runtime Library, Windows TCP/IP, and a second iSCSI Target Service bug. All needing unusual attack conditions to line up, which buys you a little time but not an excuse. Then the file-format mountain: seventeen Excel bugs, six in Access, four apiece in Office and Office Word, one plain Word, one PowerPoint, one .NET Core. Remote Desktop Client's other three bugs sit at a comparatively modest 7.5, but don't read too much comfort into that \u2014 all three need high attack complexity and user interaction, which is precisely the combination phishing campaigns are built to satisfy. Closing out RCE category, there are two more DNS Server bugs, a DHCP Client use-after-free needing local low-privilege access, a Universal Disk Format driver bug that requires physical media and a Windows Codecs Library.\nThere are nearly 180 privilege escalation bugs fixed this month, and as usual, most simply lead to local attackers executing their code at SYSTEM-level privileges or administrative privileges, so there\u2019s not much to add without further technical details about the bugs themselves. Believe it or not, that leaves only about 20 bugs to discuss. Access control keeps failing in the same places: SharePoint draws two EoPs, then contributes a third via server-side request forgery, and a fourth through cross-site scripting (XSS) that at least needs a user to click something first. Entra Connect adds a SQL injection, .NET Framework an incorrect-authorization bug, and Azure CycleCloud adds a missing-authorization flaw, That\u2019s five different products with the same underlying lesson about checking who\u2019s allowed to do what. Windows Telephony Service is the surprise repeat offender, landing four separate EoPs, but four bugs in one dusty legacy service in a single release is the kind of pattern that makes you wonder who's still dialing in. The rest is a genuine grab bag: Key Guard gets a heap overflow sitting on the trust chain below the OS, DHCP Client and Narrator Braille both fall to local low-privilege bugs, .NET picks up an uncaught exception that actually changes scope, .NET Framework adds a path-traversal bug requiring a click, GitHub Copilot and VS Code get an OS command injection needing the same, Azure Storage Explorer falls to XSS, Azure Monitor Agent and OneDrive for macOS both need high privileges just to start, which caps their real-world urgency, and Exchange Server closes it out with an SSRF bug whose blast radius Microsoft itself rates as confidentiality-only, no integrity or availability hit.\nThere are 11 SFB bugs this month, all Important, none exploited or publicly disclosed. Visual Studio Code accounts for four, Python extension included: one fails open outright, the other three trip on bad authorization checks \u2014 all need a click, which is a low bar in a tool people click through constantly. PowerShell adds a code-injection bypass, and Copilot Chat gets one as well. Exchange Server and Windows Defender Firewall Service both via have missing authorization bugs. The .NET service has a bug via HTTP request smuggling, Active Directory via weak encryption, and Schannel via bad signature verification. In the low individual urgency category, both Schannel and AD have bugs with  \u201cbroken crypto trust\u201d are worth a second look despite the low scores.\nLooking at the info disclosure bugs, and fortunately, the vast majority of these simply result in info leaks consisting of unspecified memory contents or memory addresses. There are few others of note. The CVSS 6.5 tier is the one with more bite: Windows DHCP Server alone accounts for eight of these, three more hit Remote Desktop Client, two hit SMB Client, two hit Excel, and singles land in PowerShell, .NET, Azure CycleCloud, two Dynamics products, SharePoint, Teams iOS, and VS Code. All are unauthenticated, network-reachable memory leaks, but DHCP Server picking up eight in one release is a pattern, not noise. Everything else sits at 5.5 or below and is almost entirely \"leaks unspecified memory contents,\" differing mainly by which component leaks it. Office file formats dominate with roughly twenty bugs split across Excel, Word, Office generically, Office Graphics, and PowerPoint. Win32k contributes four, NTFS five, GDI/GDI+ three, Event Logging and WMI two apiece, DWM Core two, AMD Zen two. The remaining singles clear out fine during a normal patch cycle without special urgency.\nMoving on to spoofing patches for August, SharePoint dominates with eleven bugs, mostly stored XSS letting an authenticated attacker spoof content, plus a mixed bag of deserialization, code injection, SSRF, and credential exposure at the low end. Outside SharePoint, Teams for Android/iOS gets a high-CVSS (8.8) XSS bug. Exchange Server gets one too. Windows NAT has a scope-changing origin-validation flaw reachable from an adjacent network, and Outlook closes it out with a credential-exposure spoofing bug.\nThere are 14 DoS bugs getting patched this month. NULL pointer dereferences dominate: TCP/IP, iSCSI Target Service, Windows Graphics Kernel, and Remote Registry Service (twice) all crash the same way, unauthenticated over the network. iSCSI Target Service adds a second DoS via heap overflow, with three hits total this release counting its RCE. Resource-exhaustion bugs cover .NET, RPC, DHCP Client, and Microsoft Identity - all unauthenticated, all just flood-and-crash. The rest need local or elevated access: Exchange Server, Windows Network File System, and path/link-resolution bug in Windows Management Services. In other words, nothing exotic. Just patch it in the normal cycle, with a nod to Remote Registry Service and iSCSI Target Service for repeat appearances.\nFinally, there are a handful of tampering bugs receiving patches this month. They start with SharePoint via incorrect authorization. The Windows HTTP Protocol Stack has a bug via a partial string comparison flaw reachable from an adjacent network, and Windows Hello via cleartext storage of sensitive data locally. The Hello one is the one worth a second glance. Biometric auth storing something in the clear isn't a great look, even at a modest 5.5.\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on September 8, just after Labor Day here is the US. I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-08-12T01:01:29.391725Z"}, {"uuid": "cc5e287b-b627-4287-b753-4e6338fc9e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnqj744cc2n", "content": "\ud83d\udccc CVE-2026-62392 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. A backend API may bring job ... https://www.cyberhub.blog/cves/CVE-2026-62392", "creation_timestamp": "2026-07-15T03:07:08.011173Z"}, {"uuid": "62572b67-d918-44cb-b57b-e2cebd44d09c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62390", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqnotjj6jj23", "content": "\ud83d\udccc CVE-2026-62390 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table cat... https://www.cyberhub.blog/cves/CVE-2026-62390", "creation_timestamp": "2026-07-15T02:37:06.108960Z"}, {"uuid": "d594d9a9-b6f7-4379-8ef9-b85efe43a9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62195", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqoemwbh6j2f", "content": "\ud83d\udccc CVE-2026-62195 - OpenClaw versions 2026.5.20 before 2026.6.6 contain an authorization bypass vulnerability in the MCP loopback feature that allows lower-trust callers ... https://www.cyberhub.blog/cves/CVE-2026-62195", "creation_timestamp": "2026-07-15T09:07:06.769549Z"}, {"uuid": "1fd3805d-43e0-4189-beb7-7faa86c88d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62196", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqogckmhcq2h", "content": "\ud83d\udccc CVE-2026-62196 - OpenClaw versions 2026.3.22 before 2026.6.6 contain an authorization bypass vulnerability where WhatsApp group IDs can satisfy elevated sender allowli... https://www.cyberhub.blog/cves/CVE-2026-62196", "creation_timestamp": "2026-07-15T09:37:06.444311Z"}, {"uuid": "a21d68a1-600c-414f-8cbd-c318c8a7c6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62199", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqohy7pg2g26", "content": "\ud83d\udccc CVE-2026-62199 - OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that can miss interpreter startup variables. When the affected fea... https://www.cyberhub.blog/cves/CVE-2026-62199", "creation_timestamp": "2026-07-15T10:07:07.299807Z"}, {"uuid": "51ca8d76-933d-4364-89be-6c1b7816b67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62200", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626", "content": "\ud83d\udccc CVE-2026-62200 - OpenClaw versions before 2026.6.6 contain a flaw in host exec environment filtering that could allow Git ext transport to be abused. When the affected... https://www.cyberhub.blog/cves/CVE-2026-62200", "creation_timestamp": "2026-07-15T10:37:06.177933Z"}, {"uuid": "682f5394-6aa5-45ed-a224-9f2ef550f3ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62190", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqoldijrxi26", "content": "\ud83d\udccc CVE-2026-62190 - OpenClaw versions before 2026.6.9 contain an authorization bypass vulnerability in the flock wrapper that allows lower-trust callers to execute or per... https://www.cyberhub.blog/cves/CVE-2026-62190", "creation_timestamp": "2026-07-15T11:07:07.476891Z"}, {"uuid": "a081f684-739e-4070-a732-845478295d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62194", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqomz5i76z22", "content": "\ud83d\udccc CVE-2026-62194 - OpenClaw versions 2026.5.20 before 2026.6.9 contain a privilege escalation vulnerability in plugin install commands that allows lower-trust callers to... https://www.cyberhub.blog/cves/CVE-2026-62194", "creation_timestamp": "2026-07-15T11:37:09.021405Z"}, {"uuid": "d5681025-f9fd-4f4e-9f44-ffc6ef9b3709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqortklsmj2f", "content": "JetBrains vulnerabilities patched: CVE-2026-62422 (CVSS 10) YouTrack authentication bypass, IntelliJ IDEA RCE CVE-2026-59792, and four TeamCity flaws.\n\n#JetBrains #YouTrack #IntelliJIDEA #TeamCity #CVE", "creation_timestamp": "2026-07-15T13:03:28.382086Z"}, {"uuid": "f5503e06-4be8-49a2-b60d-c484c43aab55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62187", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqovfe5as62u", "content": "\ud83d\udccc CVE-2026-62187 - OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. A lower-trust caller or a configure... https://www.cyberhub.blog/cves/CVE-2026-62187", "creation_timestamp": "2026-07-15T14:07:06.567428Z"}, {"uuid": "d253c1bc-3999-4439-91aa-8f600549e870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62175", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp5pcy7rq2s", "content": "CVE-2026-62175 - Rejected reason: ** REJECT ** DO NOT USE THIS CAND\nCVE ID : CVE-2026-62175\n \n Published : July 15, 2026, 2:18 p.m. | 59\u00a0minutes ago\n \n Description : Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-60091. Reason: This candid...", "creation_timestamp": "2026-07-15T16:35:50.631960Z"}, {"uuid": "ccafda6a-1395-4fa8-b803-f4aced12b9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62685", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp73czoe72e", "content": "\ud83d\udfe0 CVE-2026-62685 - High (8.1)\n\nFile Browser is a file managing interface for uploading, deleting, previewing, renaming, and edit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62685/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T17:00:27.854943Z"}, {"uuid": "b363269f-f1da-4d59-be18-e2bb8222d84d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62294", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqp7a4ktc32s", "content": "CVE-2026-62294 - Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot \"Open With\"\nCVE ID : CVE-2026-62294\n \n Published : July 15, 2026, 2:20 p.m. | 56\u00a0minutes ago\n \n Description : Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, t...", "creation_timestamp": "2026-07-15T17:03:08.120817Z"}, {"uuid": "a7a2df0f-d1ce-4907-8e30-c904a7783100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o", "content": "CVE-2026-62378 - console\nA vulnerability in the RustFS Console's PDF preview feature allows an attacker to inject malicious code into the management interface, potentially stealing sensitive administrator\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#console #rustfs #CVE #infosec", "creation_timestamp": "2026-07-15T17:44:06.326274Z"}, {"uuid": "e6a616bb-aa8e-4614-acbe-d82615cd5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e", "content": "\ud83d\udd34 CVE-2026-62378 - Critical (9)\n\nRustFS Console is a web management console for the RustFS distributed file system. From 0.1.7 unt...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62378/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T18:00:09.309708Z"}, {"uuid": "c8d2ff86-e9fb-4cd4-a9b4-0977b8ff421c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpeumdoqk2p", "content": "CVE-2026-62948 - openwrt\nAn attacker can inject malicious code into the OpenWrt admin interface, potentially allowing them to steal sensitive information or take control of the device. This is fixed in version\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#openwrt #CVE #infosec", "creation_timestamp": "2026-07-15T18:44:04.784211Z"}, {"uuid": "f932a936-f482-4818-97ea-b30a772e8a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpfsyvg2m2m", "content": "\ud83d\udd34 CVE-2026-62948 - Critical (9.6)\n\nOpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62948/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T19:01:04.856534Z"}, {"uuid": "2edf0c55-c82c-4a49-8ee4-81ea8b5594fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62389", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpftgvi3n2h", "content": "\ud83d\udfe0 CVE-2026-62389 - High (7.5)\n\nws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62389/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T19:01:19.537058Z"}, {"uuid": "f5a0ff31-5469-4889-9ca7-dc55e623a7ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpghuqeib22", "content": "CVE-2026-62378 - RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover\nCVE ID : CVE-2026-62378\n \n Published : July 15, 2026, 5:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : RustFS Console is a web management console for the RustFS ...", "creation_timestamp": "2026-07-15T19:12:44.767996Z"}, {"uuid": "2369e5e2-f7f5-438f-b4c6-2506d8e54714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62389", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqphpekd522l", "content": "CVE-2026-62389 - ws\nCVE ID : CVE-2026-62389\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments,...", "creation_timestamp": "2026-07-15T19:34:49.945015Z"}, {"uuid": "b98e966d-fb55-4d11-8908-8808cbc6b55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpitaj4sg2s", "content": "CVE-2026-62948 - OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname \u2192 stored XSS in the LuCI admin UI\nCVE ID : CVE-2026-62948\n \n Published : July 15, 2026, 6:16 p.m. | 17\u00a0minutes ago\n \n Description : OpenWrt is a Linux operating sy...", "creation_timestamp": "2026-07-15T19:54:53.773892Z"}, {"uuid": "970993fc-82ec-4c85-868f-855277540e59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62349", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj4yfdnr2e", "content": "\ud83d\udfe0 CVE-2026-62349 - High (8.3)\n\nTDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62349/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T20:00:21.384788Z"}, {"uuid": "18932349-4324-40c0-baba-69756d07cccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62351", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpj577qvk23", "content": "\ud83d\udfe0 CVE-2026-62351 - High (7.5)\n\nTDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62351/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T20:00:28.641051Z"}, {"uuid": "8a9a5c89-4908-4341-950a-1cacef9d091c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpl6iytqy2s", "content": "CVE-2026-62353 - TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGetToken\nCVE ID : CVE-2026-62353\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is a time-series database optimized for Internet of Things devices. Prior to 3.4.1.14, ...", "creation_timestamp": "2026-07-15T20:36:59.087758Z"}, {"uuid": "68c66afe-92f1-41e2-a051-e77132e1b13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqplbun2nl2h", "content": "CVE-2026-62348 - TDengine: KILL SSMIGRATE missing authorization lets low-privilege users interrupt shared-storage migrations\nCVE ID : CVE-2026-62348\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is a time-series database optimized for Inter...", "creation_timestamp": "2026-07-15T20:38:51.976582Z"}, {"uuid": "ab74dba9-11ce-4125-b942-2bac49d3a8c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62350", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqplfhvrnj2i", "content": "CVE-2026-62350 - TDengine: UDF lead to RCE\nCVE ID : CVE-2026-62350\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with create udf pri...", "creation_timestamp": "2026-07-15T20:40:52.705931Z"}, {"uuid": "507db896-43a8-49c6-b108-e66acc6e72d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62349", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpm4f6fxh2n", "content": "CVE-2026-62349 - TDengine: Off-by-One Buffer Overflow\nCVE ID : CVE-2026-62349\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is an open source, time-series database optimized for Internet of Things devices. In 3.4.1.6 and earlier, source/lib...", "creation_timestamp": "2026-07-15T20:53:41.752698Z"}, {"uuid": "2d744929-cb2d-4425-805c-16cac3dc3b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpmjafzh62u", "content": "CVE-2026-62355 - TDengine: Standard User permission unexpect\nCVE ID : CVE-2026-62355\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a Data R...", "creation_timestamp": "2026-07-15T21:00:52.852351Z"}, {"uuid": "62f008a2-ea14-4b5a-abf1-aff5f3ee5515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62351", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpncvvuaa2m", "content": "CVE-2026-62351 - TDengine: Unauthenticated Remote Denial of Service via Out-of-Bounds Read in transDecompressMsg\nCVE ID : CVE-2026-62351\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : TDengine is a time-series database optimized for Internet of Thing...", "creation_timestamp": "2026-07-15T21:15:14.401277Z"}, {"uuid": "0afd65c6-7d2d-4fad-a7b4-3013d51e76c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpnuuez3f2s", "content": "CVE-2026-62947 - OpenWrt: ACL bypass and arbitrary root file read via cgi-io cgi-download\nCVE ID : CVE-2026-62947\n \n Published : July 15, 2026, 7:18 p.m. | 15\u00a0minutes ago\n \n Description : OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi...", "creation_timestamp": "2026-07-15T21:25:16.639331Z"}, {"uuid": "61eb9025-3097-4559-bc79-b763cd93afc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62312", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpptu2t522m", "content": "\ud83d\udfe0 CVE-2026-62312 - High (8.8)\n\n9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authenticated atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62312/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T22:00:30.797361Z"}, {"uuid": "2876945d-edde-4540-bf94-008ee8d365cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpx4mn2pk2l", "content": "CVE-2026-62312 - 9Router: Authenticated RCE via Unvalidated MCP Plugin Arguments\nCVE ID : CVE-2026-62312\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : 9Router is an AI router & token saver. Prior to 0.5.2, 9Router allows a remote authent...", "creation_timestamp": "2026-07-16T00:10:40.541972Z"}, {"uuid": "d3b00087-08ba-4df1-a6b4-24a34a2cda29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62314", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqq2plfmfn2s", "content": "CVE-2026-62314 - Anubis: Policy bypass via client controlled X-Original-URI header\nCVE ID : CVE-2026-62314\n \n Published : July 15, 2026, 10:17 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Anubis is a Web AI Firewall Utility that challenges users' connections in order to prot...", "creation_timestamp": "2026-07-16T01:14:58.228277Z"}, {"uuid": "81ad9d05-feff-4c3d-9e48-6c87609103fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62539", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtydx3yu4g23", "content": "\ud83d\udccc CVE-2026-62539 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.cyberhub.blog/cves/CVE-2026-62539", "creation_timestamp": "2026-08-26T12:37:07.045057Z"}, {"uuid": "1a20910f-d6f3-40da-a71e-220da6a27de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62147", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrelmssk2y", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4 \u05d1-Tempo Operator - CVE-2026-62147 \u05d5\u05de\u05d4 \u05d6\u05d4 \u05d0\u05d5\u05de\u05e8 \u05dc\u05da\n\n\n\nhttps://khesef.xyz/posts/EDEC8331-231C-4DE5-9B90-F0F1476B7871", "creation_timestamp": "2026-07-16T08:00:25.358766Z"}, {"uuid": "3010986f-90f2-4fa5-b4f4-d1a325f4f805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/sakis.tech/post/3mu5672v4hc2x", "content": "Exchange-L\u00fccke: Exploit ist \u00f6ffentlich \u2014 85 Prozent noch ungepatcht\n\nF\u00fcr die Exchange-L\u00fccke CVE-2026-62911 liegt ein fertiger Exploit auf GitHub \u2014 und laut CERT-Bund sind 85 Prozent der Server in Deutschland noch offen. Warum dich das auch ohne eigenen Exchange betrifft.\n\n#sicherheit", "creation_timestamp": "2026-08-28T10:37:30.936025Z"}, {"uuid": "35094523-934e-448d-9131-a3dcdb4d6e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62541", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyfmq3mj62f", "content": "\ud83d\udccc CVE-2026-62541 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.cyberhub.blog/cves/CVE-2026-62541", "creation_timestamp": "2026-08-26T13:07:06.522706Z"}, {"uuid": "068f5e46-a228-4ee0-9a23-198b263103ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62541", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mtyfmqv67n2b", "content": "\ud83d\udccc CVE-2026-62541 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.potatohub.blog/cves/CVE-2026-62541", "creation_timestamp": "2026-08-26T13:07:07.232179Z"}, {"uuid": "9d2f0b9e-e94d-4da4-a153-f9e6c8b6c983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62958", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-27T12:00:09.584742Z"}, {"uuid": "886d6b38-59f2-4fa4-8ff5-d74981e0a44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62308", "type": "seen", "source": "https://t.me/GithubRedTeam/93314", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 01:49:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:07.151979Z"}, {"uuid": "dfa8efc6-6107-4a1a-b0c2-0cfcd3824b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62351", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqr7gbxdh523", "content": "CVE-2026-62351 - Critical OOB read in TDengine. Unauthenticated crash via malformed RPC packets. CVSS 7.5. Patch to 3.4.1.15 immediately. #CVE #TDengine #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62351/", "creation_timestamp": "2026-07-16T12:11:54.839123Z"}, {"uuid": "a734cde3-2f80-418f-bb5a-a941df0a8aec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62351", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116929588967089687", "content": "CVE-2026-62351 - Critical OOB read in TDengine. Unauthenticated crash via malformed RPC packets. CVSS 7.5. Patch to 3.4.1.15 immediately. #CVE #TDengine #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62351/", "creation_timestamp": "2026-07-16T12:12:14.033872Z"}, {"uuid": "48625143-6854-465a-9539-166426509930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62543", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyhcexwrd2h", "content": "\ud83d\udccc CVE-2026-62543 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.cyberhub.blog/cves/CVE-2026-62543", "creation_timestamp": "2026-08-26T13:37:07.078737Z"}, {"uuid": "41e35698-5696-4a7b-9791-10a38db30a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62544", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyixzbea624", "content": "\ud83d\udccc CVE-2026-62544 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.cyberhub.blog/cves/CVE-2026-62544", "creation_timestamp": "2026-08-26T14:07:06.822197Z"}, {"uuid": "d1231afe-6eb8-4e33-85d7-7de25fb8bf71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/sakis.tech/post/3mu57nrjv7j2o", "content": "Neues Video: Exchange Sicherheitsl\u00fccke CVE-2026-62911: Exploit ist \u00f6ffentlich \u2014 das musst du wissen\n\nEin \u00f6ffentlicher Exploit trifft auf 85 Prozent ungepatchte Server \u2014 f\u00fcr mich ist das keine Sicherheitsl\u00fccke mehr, sondern eine Einladung. Besonders bitter: Wer noch Exchange 2016 oder 2019\u2026", "creation_timestamp": "2026-08-28T11:03:38.078906Z"}, {"uuid": "02eadd61-cef3-492d-8738-7d8a436d6d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62457", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyknnt3o22f", "content": "\ud83d\udccc CVE-2026-62457 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Common Events).   The supported version that is ... https://www.cyberhub.blog/cves/CVE-2026-62457", "creation_timestamp": "2026-08-26T14:37:07.187869Z"}, {"uuid": "b762c725-1505-41b5-963d-f3f67e904e38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62314", "type": "seen", "source": "https://mastodon.social/users/hrbrmstr/statuses/116930438344532661", "content": "Anubis is busted (CVE-2026-62314) and FWIW it rly doesn't stop the AI bots even when not busted \u2014 https://vulnerability.circl.lu/vuln/CVE-2026-62314", "creation_timestamp": "2026-07-16T15:48:14.634213Z"}, {"uuid": "03c8bd00-779e-44fa-8cda-fb4fbb87e615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62314", "type": "seen", "source": "https://bsky.app/profile/hrbrmstr.mastodon.social.ap.brid.gy/post/3mqrljbkozjd2", "content": "Anubis is busted (CVE-2026-62314) and FWIW it rly doesn't stop the AI bots even when not busted \u2014 https://vulnerability.circl.lu/vuln/CVE-2026-62314", "creation_timestamp": "2026-07-16T15:48:43.788057Z"}, {"uuid": "18fd2c9e-ddcc-4da9-aad1-950f1be98b7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99156", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62911\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hypnguyen1209\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 04:49:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC pre-auth RCE on Exchange\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:04.140632Z"}, {"uuid": "30b510cf-4329-4559-a71e-3afcad0dbbf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsfrgk4dd2u", "content": "CVE-2026-62963 - Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport\nCVE ID : CVE-2026-62963\n \n Published : July 16, 2026, 8:16 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Centrifugo is an open-source scalable real-time messaging...", "creation_timestamp": "2026-07-16T23:38:10.691755Z"}, {"uuid": "f68715ce-6d5b-4060-af86-44913b135687", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:51.670400Z"}, {"uuid": "96dee32f-8764-4720-83cd-4b79c7014fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:52.388375Z"}, {"uuid": "8ff97abc-fbc2-4b74-b061-63b5f801e6b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:52.455327Z"}, {"uuid": "65747c15-29c5-4547-9031-7137ab4f3d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:52.518166Z"}, {"uuid": "6ed3391b-1d1e-4811-b8aa-fd0d36ca55a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62308", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93314", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a 4qu4r1um\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 01:49:06\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA combination of CVE-2026-55494 and CVE-2026-62308 to get root privilege RCE in tugtainer\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.581820Z"}, {"uuid": "d445d904-7cbe-4206-a104-22e155353228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62826", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqshealkar2l", "content": "CVE-2026-62826 - Microsoft SharePoint Server Spoofing Vulnerability\nCVE ID : CVE-2026-62826\n \n Published : July 16, 2026, 10:17 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Offi...", "creation_timestamp": "2026-07-17T00:06:35.851086Z"}, {"uuid": "6bbf9095-5c7a-4a0b-aefa-f0c35b272d9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsidieaof2d", "content": "CVE-2026-62241 - clawvet\nA self-hosted Clawvet API server is at risk of exposing user data if not updated to version 0.7.5 or later. An attacker can access a user's email address, subscription plan, and\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#clawvet #mohibshaikh #CVE #infosec", "creation_timestamp": "2026-07-17T00:24:04.207614Z"}, {"uuid": "63d6e0d6-eed2-46f5-b00b-0504c329d974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "seen", "source": "https://t.me/GithubRedTeam/98505", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a loanvui\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 17:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.113141Z"}, {"uuid": "8f56ef68-342a-4a09-ab8f-f11a92289eaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mu2vp5t64f2c", "content": "\ud83d\udce2 [VULN] Une vuln\u00e9rabilit\u00e9 Exchange \u00e0 patcher d'urgence  CVE-2026-62911\n\nLe 11 ao\u00fbt dernier, Microsoft d\u00e9voilait son patch tuesday le plus volumineux, avec des correctifs pour rien moins que 421 vuln\u00e9rabilit\u00e9s, dont 7 pour Exchange.\n\n#Vuln\u00e9rabilit\u00e9 #CVE #Cyberveille", "creation_timestamp": "2026-08-27T13:00:07.469423Z"}, {"uuid": "22628937-d4fd-44b5-8e5b-e6318471fe4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:45.242309Z"}, {"uuid": "66d778b6-1d0f-4483-8942-ef9e05f67e88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0289", "content": "", "creation_timestamp": "2026-08-28T12:45:39.928432Z"}, {"uuid": "90c3c17f-f0a0-47a1-b39c-d797cca717c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:45.566118Z"}, {"uuid": "5a74b01a-7e4f-43eb-86cf-1021ee6a510f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:48.181091Z"}, {"uuid": "b102a46d-3dff-4dee-ace8-41f560b0e770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:45.787661Z"}, {"uuid": "eb0d3f8a-88e1-47c7-baa8-af1bbd90134f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116932727657867490", "content": "MohibShaikh clawvet API server <0.7.5 (CVE-2026-62241) suffers a CRITICAL flaw: hard-coded JWT secret enables unauthenticated user data access and session cookie forgery. Change secrets & limit endpoint access. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241 #vuln", "creation_timestamp": "2026-07-17T01:30:26.634048Z"}, {"uuid": "ac9526ea-89d0-4311-b1b9-e68e9895edc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62241", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsm27phe52j", "content": "MohibShaikh clawvet API <0.7.5 has a CRITICAL flaw: attackers can forge JWTs & access sensitive user info. Change default JWT secret & restrict API endpoints now. https://radar.offseq.com/threat/cve-2026-62241-missing-authentication-for-critical-b8ebafbae06b4bce #OffSeq #CVE202662241", "creation_timestamp": "2026-07-17T01:30:28.729398Z"}, {"uuid": "28a3bae7-2b0a-4657-b697-664b2a817a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62318", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqsnr6vyls2w", "content": "2/3\n\nl/netpbm-11.15.03-x86_64-1.txz:  Upgraded.\nn/netatalk-4.5.1-x86_64-1.txz:  Upgraded.\n  This update fixes bugs and security issues.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-62318\n    https://www.cve.org/CVERecord?id=CVE-2026-62319", "creation_timestamp": "2026-07-17T02:01:12.807432Z"}, {"uuid": "60d12374-8766-4606-b6af-779c48e4e1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62319", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqsnr6vyls2w", "content": "2/3\n\nl/netpbm-11.15.03-x86_64-1.txz:  Upgraded.\nn/netatalk-4.5.1-x86_64-1.txz:  Upgraded.\n  This update fixes bugs and security issues.\n  For more information, see:\n    https://www.cve.org/CVERecord?id=CVE-2026-62318\n    https://www.cve.org/CVERecord?id=CVE-2026-62319", "creation_timestamp": "2026-07-17T02:01:12.852601Z"}, {"uuid": "205b7011-305b-43d1-8565-001c256b4d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62320", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqsnr7xax22x", "content": "3/3\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-62320\n    https://www.cve.org/CVERecord?id=CVE-2026-62321\n  (* Security fix *)\nx/mesa-26.1.5-x86_64-1.txz:  Upgraded.\nx/wayland-1.26.0-x86_64-1.txz:  Upgraded.\nxap/freerdp-3.30.0-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-07-17T02:01:13.802739Z"}, {"uuid": "c83caec6-a09c-4932-9805-265d036099f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62321", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqsnr7xax22x", "content": "3/3\n\nhttps://www.cve.org/CVERecord?id=CVE-2026-62320\n    https://www.cve.org/CVERecord?id=CVE-2026-62321\n  (* Security fix *)\nx/mesa-26.1.5-x86_64-1.txz:  Upgraded.\nx/wayland-1.26.0-x86_64-1.txz:  Upgraded.\nxap/freerdp-3.30.0-x86_64-1.txz:  Upgraded.", "creation_timestamp": "2026-07-17T02:01:13.850763Z"}, {"uuid": "eec5ef6e-9af9-4e63-8fd6-a1090f6f46e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62217", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqspzu36242e", "content": "CVE-2026-62217 - OpenClaw 2026.5.14-beta.1\nCVE ID : CVE-2026-62217\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw 2026.5.14-beta.1 before 2026.5.27 contain an authorization flaw in the QQBot exec approvals feature. When the feature is enable...", "creation_timestamp": "2026-07-17T02:41:50.854432Z"}, {"uuid": "967894ed-9851-4625-853e-ff414189fbe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsq4tvjyu2o", "content": "CVE-2026-62228 - OpenClaw\nCVE ID : CVE-2026-62228\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals that allows lower-trust callers to execute actions beyond t...", "creation_timestamp": "2026-07-17T02:43:31.405539Z"}, {"uuid": "203dda43-ddf5-4eaf-bf63-2f549e5d937f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62226", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsq7z7ib72w", "content": "CVE-2026-62226 - OpenClaw 2026.3.28\nCVE ID : CVE-2026-62226\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw 2026.3.28 before 2026.5.19 contain an authorization bypass vulnerability in the browser act route that fails to properly validate curr...", "creation_timestamp": "2026-07-17T02:45:17.491793Z"}, {"uuid": "28007d33-2309-4847-a916-82494cccd490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62232", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsqbhg4qj2v", "content": "CVE-2026-62232 - grav\nGrav versions before 2.0.4 have a security weakness that allows attackers to bypass the extra protection of 2-factor authentication. This means that even with an extra verification step,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-07-17T02:46:05.745567Z"}, {"uuid": "9ae0af9a-2d50-4260-8451-84670e27dfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62218", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqdez4ne2l", "content": "CVE-2026-62218 - OpenClaw 2026.1.20\nCVE ID : CVE-2026-62218\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust ca...", "creation_timestamp": "2026-07-17T02:47:10.493495Z"}, {"uuid": "c344caaf-8fd9-45b5-a643-49d6ca24e0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62215", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqgy4pt32i", "content": "CVE-2026-62215 - OpenClaw\nCVE ID : CVE-2026-62215\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability in HTTP Canvas responses that allows lower-trust callers to forge truste...", "creation_timestamp": "2026-07-17T02:49:11.288015Z"}, {"uuid": "fb8551b4-b2c9-42c4-9a44-7f590a166cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62207", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqkt3uoy2m", "content": "CVE-2026-62207 - OpenClaw\nCVE ID : CVE-2026-62207\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.5 contain an authentication bypass vulnerability that allows lower-trust callers to reach admin-scoped tools. Attackers c...", "creation_timestamp": "2026-07-17T02:51:20.205816Z"}, {"uuid": "4ad85a41-f260-4f94-a4ed-312e15222d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62233", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqoxkcre2u", "content": "CVE-2026-62233 - grav-plugin-api\nCVE ID : CVE-2026-62233\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : grav-plugin-api before 1.0.6 fails to validate super-admin status in createApiKey, generate2fa, and disable2fa endpoints, allowing non-super api.u...", "creation_timestamp": "2026-07-17T02:53:39.135268Z"}, {"uuid": "e130340d-4994-400c-8754-fda69954b88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62209", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqtgyf7t2x", "content": "CVE-2026-62209 - OpenClaw 2026.5.10-beta.1\nCVE ID : CVE-2026-62209\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions 2026.5.10-beta.1 before 2026.6.5 contain an authorization bypass in the ClickClack agent-mode dispatch feature, which ...", "creation_timestamp": "2026-07-17T02:56:09.749726Z"}, {"uuid": "38cd59cc-24aa-45fc-a044-c7c09db1e625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsqydgkra2n", "content": "CVE-2026-62203 - OpenClaw\nCVE ID : CVE-2026-62203\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions before 2026.6.6 contain an environment variable filtering vulnerability in host exec that fails to properly sanitize rustup startup var...", "creation_timestamp": "2026-07-17T02:58:53.739373Z"}, {"uuid": "749fa97f-2480-435b-9009-8ed5eb9e3da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62232", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116933081864341410", "content": "CVE-2026-62232 (CRITICAL): getgrav Grav <2.0.4 has a 2FA bypass flaw \u2014 attackers knowing a user's password can overwrite the 2FA secret, reducing protection to password-only. Monitor & restrict access. Patch status pending. https://radar.offseq.com/threat/cve-2026-62232-missing-authorization-in-getgrav-gr-604d58721f0c378d #OffSeq #CVE202662232 #2FA #infosec", "creation_timestamp": "2026-07-17T03:00:31.343944Z"}, {"uuid": "d44f325c-259a-4f6d-ab8e-6e813a76b944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62232", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqsr3bz3zw2t", "content": "Grav <2.0.4 hit by a CRITICAL vulnerability: attackers with a valid password can reset user 2FA secrets, bypassing multi-factor auth. Restrict access, monitor 2FA changes, and check for patches. https://radar.offseq.com/threat/cve-2026-62232-missing-authorization-in-getgrav-gr-604d58721f0c378d #O...", "creation_timestamp": "2026-07-17T03:00:34.023427Z"}, {"uuid": "0bb2153d-d10a-4d30-b88a-928eb73ccfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62386", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsr5pk5ux2s", "content": "CVE-2026-62386 - Grav\nCVE ID : CVE-2026-62386\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens through the ?token= URL query parameter on every API route (JwtAut...", "creation_timestamp": "2026-07-17T03:01:53.896602Z"}, {"uuid": "b65c49be-5ac1-4457-85b3-63925876723c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62223", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsrdon7ah2c", "content": "CVE-2026-62223 - OpenClaw\nCVE ID : CVE-2026-62223\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in the device-pair approval feature that allows lower-trust callers to execute ac...", "creation_timestamp": "2026-07-17T03:05:14.527314Z"}, {"uuid": "58888394-cfd1-49ee-95a6-56bf82f4e700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsrkfmfyx2c", "content": "CVE-2026-62229 - OpenClaw\nCVE ID : CVE-2026-62229\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob matching that allows lower-trust callers to execute action...", "creation_timestamp": "2026-07-17T03:08:59.819050Z"}, {"uuid": "58d0df1c-6a89-4fe5-b41f-296752769a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62230", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsrs36hcw2w", "content": "CVE-2026-62230 - Grav\nCVE ID : CVE-2026-62230\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : Grav before 2.0.4 ships a default .htaccess (and reference webserver-configs/htaccess.txt) whose rules blocking access to sensitive file types (.yaml, .php, ...", "creation_timestamp": "2026-07-17T03:13:17.346847Z"}, {"uuid": "05115b05-5181-4499-8cb6-14fce69fabca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62234", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqss2zusdv2o", "content": "CVE-2026-62234 - Grav\nCVE ID : CVE-2026-62234\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : Grav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated users with api.webhooks.write permission to create webhooks wi...", "creation_timestamp": "2026-07-17T03:18:17.865896Z"}, {"uuid": "18a8c2ab-0a1a-4dc1-9cf3-2478065027f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62232", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssdyfti62i", "content": "CVE-2026-62232 - Grav\nCVE ID : CVE-2026-62232\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : Grav before 2.0.4 contains a two-factor authentication bypass vulnerability in the login plugin where the regenerate2FASecret task checks only user existence...", "creation_timestamp": "2026-07-17T03:23:18.372029Z"}, {"uuid": "0864918e-3b06-446b-9c40-fbfb179a6559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssmwu5wm2n", "content": "CVE-2026-62202 - OpenClaw 2026.6.1\nCVE ID : CVE-2026-62202\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : OpenClaw versions 2026.6.1 before 2026.6.9 contain a privilege escalation vulnerability in isolated cron jobs that allows lower-trust callers to...", "creation_timestamp": "2026-07-17T03:28:18.769555Z"}, {"uuid": "d63b1e34-7b5e-4316-8889-801cc30de157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62231", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqssvvbovb2s", "content": "CVE-2026-62231 - Grav\nCVE ID : CVE-2026-62231\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.6 contains an authorization bypass: API keys can be created with a restricted scopes array, but the ...", "creation_timestamp": "2026-07-17T03:33:19.001383Z"}, {"uuid": "0df24d68-dbff-403e-b9a8-c6d68bb78900", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqst6txcff2e", "content": "CVE-2026-62241 - clawvet\nCVE ID : CVE-2026-62241\n \n Published : July 17, 2026, 2:18 a.m. | 16\u00a0minutes ago\n \n Description : clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the de...", "creation_timestamp": "2026-07-17T03:38:20.106358Z"}, {"uuid": "27c6744f-9ede-4188-81c6-592b05a9d19c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62387", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqstlcndcq2n", "content": "CVE-2026-62387 - Grav\nCVE ID : CVE-2026-62387\n \n Published : July 17, 2026, 2:18 a.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default CORS configuration on all resp...", "creation_timestamp": "2026-07-17T03:45:17.840912Z"}, {"uuid": "dc7bfb82-da34-4412-be26-08bc42f6d89c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62764", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqt4zjdzoo2e", "content": "CVE-2026-62764: Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions", "creation_timestamp": "2026-07-17T06:34:18.349521Z"}, {"uuid": "9d413d7e-528b-4e63-9807-d1e1f3e99db6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqtbxutsz62p", "content": "Critical CVE landed today in OpenWrt:\n\nCVE-2026-62948. OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhcpd.leases through src/statefiles.c statefil\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-62948", "creation_timestamp": "2026-07-17T08:02:52.126913Z"}, {"uuid": "e759437c-71ce-4b40-ae01-0a40debe2585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:54.145996Z"}, {"uuid": "4f4f14fd-b812-436f-8be6-dadbcea4d7cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-27T13:00:54.209990Z"}, {"uuid": "aea1a03f-e173-4cbd-a979-49b378c8271c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62582", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyreaiw5m23", "content": "\ud83d\udccc CVE-2026-62582 - Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is... https://www.cyberhub.blog/cves/CVE-2026-62582", "creation_timestamp": "2026-08-26T16:37:07.812150Z"}, {"uuid": "87adb62a-808e-4dc9-a508-8da51f4672e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62826", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y", "content": "\ud83d\udd17 CVE : CVE-2026-56171, CVE-2026-62826, CVE-2026-56171, CVE-2026-62826", "creation_timestamp": "2026-07-17T14:00:06.177735Z"}, {"uuid": "b9187138-ded2-432d-8bde-1686b517c525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqtxfpq6gq2i", "content": "CVE-2026-62764 - Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions\nCVE ID : CVE-2026-62764\n \n Published : July 17, 2026, 9:16 a.m. | 4\u00a0hours, 20\u00a0minutes ago\n \n Description : Improper Handling of Insufficient Privileges ...", "creation_timestamp": "2026-07-17T14:26:24.969933Z"}, {"uuid": "4c9c7641-5f0f-40c6-9927-5c77013f4fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62240", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mquxu42n3r23", "content": "\ud83d\udccc CVE-2026-62240 - CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and block... https://www.cyberhub.blog/cves/CVE-2026-62240", "creation_timestamp": "2026-07-18T00:07:07.619971Z"}, {"uuid": "8e2d8c39-edf0-4b3e-9443-f0cea1f8a91d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62463", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtyszvavoh2h", "content": "\ud83d\udccc CVE-2026-62463 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).   The supported version t... https://www.cyberhub.blog/cves/CVE-2026-62463", "creation_timestamp": "2026-08-26T17:07:07.929669Z"}, {"uuid": "97071e75-9ade-42da-927f-0ae4c5c41234", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62378", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfrawsdq2s", "content": "CVE-2026-62378\nThe RustFS Console allows attackers to inject malicious code into PDF files, potentially stealing administrator credentials. This issue affects versions 0.1.7 to 0.1.10 of the RustFS Console. To protect your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:16:04.152094Z"}, {"uuid": "9c9cdad4-4519-4fce-a9da-d3e531c1f3e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62384", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkombhs24", "content": "\ud83d\udfe0 CVE-2026-62384 - High (7.5)\n\nNLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that a...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62384/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:25.784585Z"}, {"uuid": "fc912606-afb4-4b2a-9f51-4c045f58c40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62388", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpbkvjz5w27", "content": "\ud83d\udfe0 CVE-2026-62388 - High (7.5)\n\nNLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validati...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62388/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T22:00:33.163079Z"}, {"uuid": "95cc9c8c-f855-42f2-a8a1-4963011058d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw34zsflf2p", "content": "CVE-2026-62299: CoreDNS Vulnerability Is a Recipe for Remote DoS #CVE2026 #CoreDNS #Cybersecurity", "creation_timestamp": "2026-07-18T10:38:28.254240Z"}, {"uuid": "b379352e-9f88-4d9e-8d7e-ed5f37d23dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw355eeak2l", "content": "CVE-2026-62299 Exposes CoreDNS to Remote DoS via EDNS0 Weakness #CVE2026 #CoreDNS #DoSAttack", "creation_timestamp": "2026-07-18T10:38:31.850495Z"}, {"uuid": "5a3de123-c3e8-4d9a-b028-7fe9232f5157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35aculb2y", "content": "CVE-2026-62299: CoreDNS Vulnerability Exposes Users to Remote DoS Risks #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:34.944034Z"}, {"uuid": "69752624-8d0c-4ce4-93b1-e642b6f7377f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35cxqe42w", "content": "CVE-2026-62299: CoreDNS Vulnerability Highlights Risky Server Configurations #CVE202662299 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:37.925150Z"}, {"uuid": "f953d482-0894-4572-81a8-660b3e5d6c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35ftrmk2m", "content": "CVE-2026-62299: CoreDNS's Rewrite Plugin Elicits Panic, But at What Cost? #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:40.631695Z"}, {"uuid": "f0653535-5440-4350-ab54-1c326eb97f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62299", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35irbmn2j", "content": "CVE-2026-62299 CoreDNS: Critical Response or Overblown Risk? #CVE202662299 #CoreDNS #Cybersecurity", "creation_timestamp": "2026-07-18T10:38:43.765546Z"}, {"uuid": "67d9043e-72ab-46bd-a53a-b2e7ce879a08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35lls7a2g", "content": "CVE-2026-62309: CoreDNS Proxyproto Plugin Poses Real DoS Risk #CVE2026 #CoreDNS #SecurityVulnerability", "creation_timestamp": "2026-07-18T10:38:50.483897Z"}, {"uuid": "6f103a1a-0006-4c16-b3c7-5f656059702b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35oexs42u", "content": "CVE-2026-62309: CoreDNS Proxyproto Plugin Is an Easy Target for Remote DoS #CVE2026 #CoreDNS #Proxyproto", "creation_timestamp": "2026-07-18T10:38:51.778781Z"}, {"uuid": "2ff3fc8a-efb6-4678-b759-b03b9a6875e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35rb7wu2u", "content": "CVE-2026-62309 CoreDNS: A Denial-of-Service Threat Lurks Beneath a Simple Packet #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:52.628418Z"}, {"uuid": "ff9dc166-8ee1-44ad-9b6e-f63a368e3dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw35u7meq2g", "content": "CVE-2026-62309: CoreDNS Proxyproto Plugin Failure Highlights Service Stability Risks #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:38:56.262706Z"}, {"uuid": "9ee8a206-1ac4-4a0b-bbe4-e965a9eead03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw3cfmcau2w", "content": "CVE-2026-62309: CoreDNS's Phase of Panic and the Uncertainty Ahead #CVE202662309 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:41:28.297436Z"}, {"uuid": "e716e345-99a9-493b-aaf5-9ef3fa491f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62309", "type": "seen", "source": "https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqw3cif3xo2o", "content": "CVE-2026-62309: Is CoreDNS's Vulnerability in Proxyproto Exploitable? #CVE2026 #CoreDNS #CyberSecurity", "creation_timestamp": "2026-07-18T10:41:31.457806Z"}, {"uuid": "c5c9a404-0ec3-418e-8e3f-c7d34931d668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62857", "type": "seen", "source": "https://bsky.app/profile/hollo.hollo.social.ap.brid.gy/post/3mqwslocjbbu2", "content": "### Hollo security updates: 0.8.9 and 0.9.9\n\nIf you run Hollo, update to a patched release now. CVE-2026-62857 affects Fedify's NodeInfo client, which Hollo uses to identify the software running on remote ActivityPub servers.\n\nA NodeInfo lookup starts by fetching a remote server's `/ [\u2026]", "creation_timestamp": "2026-07-18T17:38:21.836637Z"}, {"uuid": "10a3b832-f5eb-4cc1-ac30-0af3c29e6a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62737", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98505", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62737\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a loanvui\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PowerShell\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 17:49:11\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:07.583656Z"}, {"uuid": "ecd6c118-b0da-4d36-ae10-9030c6c44507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mtu46sqzmk23", "content": "\u300cOpenAM\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - \u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\u516c\u958b\n\n\u300cOpenAM\u300d\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u304c\u660e\u3089\u304b\u3068\u306a\u3063\u305f\u3002\u30ea\u30e2\u30fc\u30c8\u3088\u308a\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3082\u5224\u660e\u3057\u3066\u304a\u308a\u3001\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u305f\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u63d0\u4f9b\u3055\u308c\u3066\u3044\u308b\u3002\n\n\u958b\u767a\u30c1\u30fc\u30e0\u3067\u306f\u73fe\u5730\u6642\u95932026\u5e747\u670820\u65e5\u306b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3068\u306a\u308b\u300cOpenAM 16.1.2\u300d\u3092\u516c\u958b\u3002\u4f9d\u5b58\u95a2\u4fc2\u306b\u3042\u308b\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u88fd\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u306e\u8106\u5f31\u6027\u3092\u542b\u3081\u3001\u3042\u308f\u305b\u306618\u4ef6\u306e\u8106\u5f31\u6027\u306b\u5bfe\u51e6\u3057\u305f\u3002\n\n\u300cCVE-2026-62379\u300d\u306f\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u8a8d\u8a3c\u306b\u7528\u3044\u308b\u30a8\u30f3\u30c9\u30dd\u30a4\u30f3\u30c8\u306b\u78ba\u8a8d\u3055\u308c\u305f\u8106\u5f31\u6027\u3002\u300cXML\u300d\u3067\u6307\u5b9a\u3055\u308c\u305f\u4efb\u610f\u306eJava\u30af\u30e9\u30b9\u3092\u691c\u8a3c\u3059\u308b...", "creation_timestamp": "2026-08-24T20:07:37.104240Z"}, {"uuid": "a957117f-7ce1-4d6b-b090-e2d785160fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62947", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mqxhztoy432e", "content": "OpenWrt: CVE-2026-62947 [MEDIUM]\n\nOpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization,\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-62947", "creation_timestamp": "2026-07-19T00:01:59.222181Z"}, {"uuid": "df24079b-adc1-441b-8a3c-0fffedf01667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62857", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mqxycl25wi2d", "content": "Top 3 CVE for last 7 days:\nCVE-2026-58532: 47 interactions\nCVE-2026-15409: 21 interactions\nCVE-2026-63030: 17 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-63030: 16 interactions\nCVE-2026-60137: 9 interactions\nCVE-2026-62857: 4 interactions\n", "creation_timestamp": "2026-07-19T04:53:12.183463Z"}, {"uuid": "ae38ee30-9b92-4800-b4e9-a9431dd705ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62243", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtpib2osvy27", "content": "\ud83d\udfe0 CVE-2026-62243 - High (7.5)\n\nNetty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions throug...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62243/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-23T00:00:19.477361Z"}, {"uuid": "c3b354c4-ee8b-4744-ab80-0fde412bbaa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/99156", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62911\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a hypnguyen1209\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-22 04:49:58\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC pre-auth RCE on Exchange\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:31.803884Z"}, {"uuid": "d3189248-9a63-488b-98cc-390ff453f8c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62234", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqywvhya4v23", "content": "\ud83d\udfe0 CVE-2026-62234 - High (8.1)\n\nGrav before 2.0.4 fails to restrict cURL protocols in webhook dispatch, allowing authenticated us...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62234/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T14:00:38.775171Z"}, {"uuid": "1219d980-3bdb-40ae-93b9-2b6e79b971a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62241", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2aalmt32l", "content": "\ud83d\udd34 CVE-2026-62241 - Critical (9.1)\n\nclawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62241/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T15:00:21.645247Z"}, {"uuid": "5afe1ad2-42a0-479e-868a-ff68feeb0100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62386", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2agxtub2j", "content": "\ud83d\udfe0 CVE-2026-62386 - High (7.5)\n\nThe Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 accepts JWT access tokens throug...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62386/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T15:00:28.183959Z"}, {"uuid": "a3ec82d3-ca88-41a1-9b2c-5319bb59612d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62227", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz2aobqa62d", "content": "\ud83d\udfe0 CVE-2026-62227 - High (7.7)\n\nOpenClaw 2026.4.14 before 2026.5.26 contain a server-side request forgery vulnerability in browse...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62227/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T15:00:35.790966Z"}, {"uuid": "f3440086-9096-45a9-bbee-3d1a7230665c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62228", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lpx7vu2m", "content": "\ud83d\udfe0 CVE-2026-62228 - High (8.8)\n\nOpenClaw before 2026.6.5 contain an authorization bypass vulnerability in node exec approvals tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62228/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T16:00:27.952644Z"}, {"uuid": "1650a047-4f32-4250-876a-08b671964f6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62229", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lx2ob22j", "content": "\ud83d\udfe0 CVE-2026-62229 - High (8.8)\n\nOpenClaw before 2026.5.18 contain an authorization bypass vulnerability in exec allowlist glob ma...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62229/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T16:00:35.627720Z"}, {"uuid": "b20ea8ba-5de6-4cc6-97fd-f067e9473813", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/24202", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-08-23T00:00:41.075468Z"}, {"uuid": "d0eb6b53-0646-4230-8d50-e319c216dbc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62418", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3vjpxyci25", "content": "CVE-2026-62418: Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check", "creation_timestamp": "2026-07-20T18:14:09.825938Z"}, {"uuid": "317a8a86-3461-499f-91f3-afb16a9398d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3w3ocrbc2r", "content": "CVE-2026-62183: Apache Syncope: User self-service privilege escalation", "creation_timestamp": "2026-07-20T18:24:12.076409Z"}, {"uuid": "6babb14b-3426-4fc3-a3fe-d5fc712e2e6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/13005", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-08-23T00:00:40.761157Z"}, {"uuid": "609ed473-5e44-4a8f-88df-4fe898842622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/qiancx.bsky.social/post/3mr3zyf67lw2u", "content": "JetBrains YouTrack \u6570\u636e\u5e93\u8bbf\u95ee\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e(CVE-2026-62422)\u6df1\u5ea6\u5206\u6790\u4e0e\u5e94\u5bf9\u7b56\u7565\n\n\n\nhttps://qian.cx/posts/7623D253-D600-46CF-856E-EF30AC69548B", "creation_timestamp": "2026-07-20T19:33:56.814154Z"}, {"uuid": "4b9464a6-c4bb-4cad-a3f4-f7ea31936d20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr3zyudrwz2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62422 \u0432 JetBrains YouTrack: \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445\n\n\n\nhttps://kripta.biz/posts/4D634B95-9B5A-4ABE-82BA-BD3176D87622", "creation_timestamp": "2026-07-20T19:34:12.443983Z"}, {"uuid": "5f28a00e-6d3c-4a3c-9498-0bfad5ef7036", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62422", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr42aaky7l2l", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4 \u05d7\u05de\u05d5\u05e8\u05d4: CVE-2026-62422 - \u05d3\u05e8\u05db\u05d9 \u05d4\u05ea\u05d7\u05de\u05e7\u05d5\u05ea \u05de\u05d0\u05d9\u05de\u05d5\u05ea JetBrains YouTrack \u05d3\u05e8\u05da \u05d2\u05d9\u05e9\u05d4 \u05d9\u05e9\u05d9\u05e8\u05d4 \u05dc\u05de\u05e1\u05d3 \u05e0\u05ea\u05d5\u05e0\u05d9\u05dd\n\n\n\nhttps://khesef.xyz/posts/EB343268-DC7C-4477-BCA4-F3122B8DB9BE", "creation_timestamp": "2026-07-20T19:38:20.446892Z"}, {"uuid": "01ccc725-e558-4eda-b31b-191269af5b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62685", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-7rc3-g7h6-22m7", "content": "", "creation_timestamp": "2026-07-21T00:35:24.052635Z"}, {"uuid": "f8c70111-7c6f-4af3-8fbb-f74af47db6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62684", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-833g-cqhp-h72j", "content": "", "creation_timestamp": "2026-07-21T00:35:26.256956Z"}, {"uuid": "f51fff5b-0b7c-44a3-b837-8a40e86567a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62843", "type": "published-proof-of-concept", "source": "https://github.com/filebrowser/filebrowser/security/advisories/GHSA-83xp-526h-j3ww", "content": "", "creation_timestamp": "2026-07-21T00:35:28.508387Z"}, {"uuid": "0d13e953-16cf-4afe-b4d0-09739044b263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62392", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gb5opdr2a", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62392 \u0432 Apache Kylin: \u0443\u0433\u0440\u043e\u0437\u0430 OS Command Injection \u0447\u0435\u0440\u0435\u0437 Async Query API\n\n\n\nhttps://kripta.biz/posts/E46FA03A-1856-47C7-B4A8-DAE4FB117E0A", "creation_timestamp": "2026-07-21T08:46:15.746858Z"}, {"uuid": "f14ecc5f-1711-4a11-81cb-2904179e507b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mr5gjcoqlw2h", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-62393 \u0432 Apache Kylin: \u0440\u0438\u0441\u043a\u0438 \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/152ABA96-FCF5-4654-AD76-903BF428F175", "creation_timestamp": "2026-07-21T08:50:49.023097Z"}, {"uuid": "2afc7e23-cc21-4af9-8bdd-e7d01ec6c30b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62393", "type": "seen", "source": "https://bsky.app/profile/khesefxyz.bsky.social/post/3mr5gqyraiv25", "content": "\u05d7\u05e9\u05d9\u05e4\u05d4: \u05e4\u05d2\u05d9\u05e2\u05d4 \u05d1\u05d1\u05d9\u05d8\u05d7\u05d5\u05df \u05d1\u05d0\u05e4\u05d0\u05e6'\u05d9 \u05e7\u05d9\u05dc\u05d9\u05df - CVE-2026-62393\n\n\n\nhttps://khesef.xyz/posts/136E9D7C-ACF7-47E0-B156-D3A91405A012", "creation_timestamp": "2026-07-21T08:55:07.504685Z"}, {"uuid": "41895f9b-d554-40df-90d7-01628f59ea43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62958", "type": "seen", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-28T00:00:52.263068Z"}, {"uuid": "4b56b57e-d48f-46ef-b521-7b2545caff23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr652gyor42j", "content": "CVE-2026-62183 - apache syncope\nApache Syncope, a user management tool, has a security issue that allows unprivileged users to gain administrator privileges. This could happen if a user is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-21T15:34:06.206570Z"}, {"uuid": "05b7e727-8ccc-4b75-acf8-4b651f724008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62415", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr6dgasgj52a", "content": "CVE-2026-62415\nA security issue in Joomla Membership Pro allowed anyone to upload files without logging in. This could have allowed malicious files to be uploaded, potentially leading to security issues. Joomla users should\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T17:28:05.522954Z"}, {"uuid": "4996e24b-9581-4ea1-b1c8-6d91f345ca1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62549", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr6zecaaiq2o", "content": "Oracle HRMS (UK) faces CRITICAL risk (CVE-2026-62549, CVSS 9.6). Low-priv attackers can modify critical data & impact more than HRMS (UK). Review https://radar.offseq.com/threat/cve-2026-62549-easily-exploitable-vulnerability-allows-low-privileged-attacker-with-network-access-via-2a35d285e3bf086c...", "creation_timestamp": "2026-07-22T00:00:42.641427Z"}, {"uuid": "a40b68da-bc16-42e6-8efe-3cd1884549f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76fe22e32q", "content": "CVE-2026-62513 - Vulnerability in the Oracle Process Manufacturing\nCVE ID : CVE-2026-62513\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business S...", "creation_timestamp": "2026-07-22T01:30:45.875358Z"}, {"uuid": "217165a0-7b94-47db-9376-917b60ea386d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62498", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76i26yps2x", "content": "CVE-2026-62498 - Vulnerability in the Oracle Flow Manufacturing pro\nCVE ID : CVE-2026-62498\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Interna...", "creation_timestamp": "2026-07-22T01:32:16.160130Z"}, {"uuid": "ca9060de-ebcc-48bf-91b2-b5cfd99936a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76kv4tsj2g", "content": "CVE-2026-62516 - Vulnerability in the Oracle Demantra Demand Manage\nCVE ID : CVE-2026-62516\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Pro...", "creation_timestamp": "2026-07-22T01:33:51.720178Z"}, {"uuid": "2df2f4f8-01a0-4c1f-97b2-4bc63bcd3265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76nusrgg2a", "content": "CVE-2026-62549 - Vulnerability in the Oracle HRMS (UK) product of O\nCVE ID : CVE-2026-62549\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll). Sup...", "creation_timestamp": "2026-07-22T01:35:32.016721Z"}, {"uuid": "bdd158fd-a2c9-4458-883f-45895e919a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62497", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76r25iy52x", "content": "CVE-2026-62497 - Vulnerability in the Oracle Flow Manufacturing pro\nCVE ID : CVE-2026-62497\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Flow Manufacturing product of Oracle E-Business Suite (component: Interna...", "creation_timestamp": "2026-07-22T01:37:18.079843Z"}, {"uuid": "6aeaac78-e509-429e-9ef5-79b05e095791", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76uftdlg2o", "content": "CVE-2026-62514 - Vulnerability in the Oracle Process Manufacturing\nCVE ID : CVE-2026-62514\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Process Manufacturing Regulatory Management product of Oracle E-Business S...", "creation_timestamp": "2026-07-22T01:39:11.178152Z"}, {"uuid": "5dbe5172-c333-4619-b90b-3cbe0175bef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62534", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr76xyoh2s2q", "content": "CVE-2026-62534 - Vulnerability in the Oracle Applications Framework\nCVE ID : CVE-2026-62534\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web...", "creation_timestamp": "2026-07-22T01:41:11.383683Z"}, {"uuid": "9f78ceac-9bcf-4471-9e46-c6584ce341a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr773trwh72i", "content": "CVE-2026-62546 - Vulnerability in the Oracle Applications Framework\nCVE ID : CVE-2026-62546\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web...", "creation_timestamp": "2026-07-22T01:43:20.703461Z"}, {"uuid": "ca13621d-b242-41c2-8c75-f69d1af49538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr777y6wgp2i", "content": "CVE-2026-62504 - Vulnerability in the Oracle Time and Labor product\nCVE ID : CVE-2026-62504\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Internal Op...", "creation_timestamp": "2026-07-22T01:45:39.401047Z"}, {"uuid": "f26fcd60-fc5e-4b98-a216-c3cd13d47ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr77ehr2br2o", "content": "CVE-2026-62547 - Vulnerability in the Oracle Workflow product of Or\nCVE ID : CVE-2026-62547\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notifica...", "creation_timestamp": "2026-07-22T01:48:09.886716Z"}, {"uuid": "5f71f75d-3564-42eb-8fdd-96811bb17dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr77je7gof2q", "content": "CVE-2026-62530 - Vulnerability in the Oracle HRMS (France) product\nCVE ID : CVE-2026-62530\n \n Published : July 21, 2026, 10:19 p.m. | 2\u00a0hours, 17\u00a0minutes ago\n \n Description : Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). S...", "creation_timestamp": "2026-07-22T01:50:53.986320Z"}, {"uuid": "f3b66cc8-9163-4627-9733-b226c9790c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62948", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr7fhbxmvx23", "content": "\ud83d\udccc CVE-2026-62948 - OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, odhcpd writes a DHCPv6 client FQDN option 39 hostname into /tmp/odhc... https://www.cyberhub.blog/cves/CVE-2026-62948", "creation_timestamp": "2026-07-22T03:37:07.116861Z"}, {"uuid": "01afb425-baaf-49d5-8972-d82be748f756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62561", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr7u7at2fx22", "content": "\ud83d\udfe0 CVE-2026-62561 - High (7.8)\n\nVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Ope...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62561/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-22T08:01:04.065925Z"}, {"uuid": "3c736219-5a66-42b8-834b-9053705cd785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62218", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mr7zkz3jvo26", "content": "\ud83d\udccc CVE-2026-62218 - OpenClaw 2026.1.20 before 2026.5.27 contain an authorization bypass vulnerability in the device.pair.approve feature that allows lower-trust callers t... https://www.cyberhub.blog/cves/CVE-2026-62218", "creation_timestamp": "2026-07-22T09:37:07.414239Z"}, {"uuid": "180593fc-4e4e-4ec8-984e-b0a787553f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "Telegram/UzTfHUgZGM9DyNSoGitZ5lAOtGPh6OQvkJEqAtc8BIR2GVs", "content": "", "creation_timestamp": "2026-07-22T17:00:05.702114Z"}, {"uuid": "e6326e6a-307d-465f-b3cf-8c66412459b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62549", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrajbfxkcc2k", "content": "CVE-2026-62549 - oracle hrms (uk)\nOracle E-Business Suite UK Payroll versions 12.2.3 to 12.2.15 are at risk of unauthorized data access and modification. This means that an attacker could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#oraclehrms #oraclecorporation #CVE #infosec", "creation_timestamp": "2026-07-22T14:18:04.533835Z"}, {"uuid": "f6d6f08e-39e8-4459-a5ed-bdec662f2f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62546", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrarcxmbpu23", "content": "CVE-2026-62546\nThe Oracle E-Business Suite's Web Utilities component, used in versions 12.2.8 to 12.2.15, has a vulnerability that allows a skilled attacker with access to the system via the internet to take control of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-22T16:42:06.511367Z"}, {"uuid": "1ad155b0-9a32-4e24-9067-af6427a88fe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62414", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrb666fqif2y", "content": "CVE-2026-62414 - page builder ck extension for joomla\nThe Joomla Page Builder CK extension does not properly limit access to page lists on the frontend, potentially allowing unauthorized users to view or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#joomlackfr #CVE #infosec", "creation_timestamp": "2026-07-22T20:32:04.646055Z"}, {"uuid": "85c1c35f-f8e5-413c-b3b4-e408c3bc150e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62144", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrb6fekyxn2y", "content": "CVE-2026-62144 - quantum security management\nAn attacker can bypass authentication and gain full access to the Check Point Management Server, potentially executing commands on managed devices. This can happen if\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#checkpoint #CVE #infosec", "creation_timestamp": "2026-07-22T20:36:05.768299Z"}, {"uuid": "4a189838-40a0-4688-8205-e914e784d0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "published-proof-of-concept", "source": "Telegram/UzTfHUgZGM9DyNSoGitZ5lAOtGPh6OQvkJEqAtc8BIR2GVs", "content": "", "creation_timestamp": "2026-07-23T00:00:08.691817Z"}, {"uuid": "50ad7182-14b3-456d-94c6-22872c8c1b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtpyz2gyov2f", "content": "CVE-2026-62674\nIn older versions of the Omnigent AI\u2011agent platform, a user who could edit a project could replace a shared component with malicious code. When later projects use that component, the malicious code runs with\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-23T05:00:03.732018Z"}, {"uuid": "04538b8f-67ef-4c9a-a6c1-174e3789ef03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62144", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116968413142673773", "content": "It is possible to see elevated activities targeting Check Point Quantum Security Management and Multi-Domain Security Management (CVE-2026-62144) https://vuldb.com/vuln/382347/cti", "creation_timestamp": "2026-07-23T08:45:43.453785Z"}, {"uuid": "8abfe312-8fa8-4e1f-9d8c-41560d289ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62145", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116969083939726073", "content": "Attention, elevated activities detected targeting Check Point Quantum Security Gateway and Quantum Security Management (CVE-2026-62145) https://vuldb.com/vuln/382353/cti", "creation_timestamp": "2026-07-23T11:36:19.105282Z"}, {"uuid": "33d49138-6d0b-4a75-b15e-bffe13499db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62144", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcs2aeery2b", "content": "\ud83d\udd17 CVE : CVE-2026-16232, CVE-2026-62144, CVE-2026-62145", "creation_timestamp": "2026-07-23T12:00:26.980849Z"}, {"uuid": "b5d498fe-74db-4c62-9de7-5c1eacf4dc7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62145", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrcs2aeery2b", "content": "\ud83d\udd17 CVE : CVE-2026-16232, CVE-2026-62144, CVE-2026-62145", "creation_timestamp": "2026-07-23T12:00:27.040258Z"}, {"uuid": "46151ea9-b859-4766-8849-9d49a401e10e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrczel3k7n2g", "content": "Apache Syncope patches an SQL injection (CVE-2026-57308) and a privilege escalation flaw (CVE-2026-62183). Update to 4.0.7 or 4.1.2 to stay safe.\n\n#ApacheSyncope #SQLInjection #PrivilegeEscalation #CVE202657308 #CVE202662183 #IdentityManagement #InfoSec #PatchNow", "creation_timestamp": "2026-07-23T14:11:30.499363Z"}, {"uuid": "93205760-1c90-4559-bf73-4de131941a33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtx237f5qa24", "content": "\ud83d\udea8 CVE-2026-62862 \u2014 CVSS 9.1 CRITICAL\n\nTypebot is an open-source chatbot builder. In self-hosted versions up to and including 3.17.1, the default ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62862\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-26T00:07:47.557268Z"}, {"uuid": "b869242d-a22a-4610-ad6b-6b3a642d5005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0289", "content": "Microsoft heeft kwetsbaarheden verholpen in Exchange Server. Een kwaadwillende kan de kwetsbaarheden misbruiken om een Denial-of-Service uit te voeren, zich voor te doen als andere gebruiker, zich verhoogde rechten toe te kennen, willekeurige code uit te voeren en/of toegang te krijgen tot gevoelige gegevens.\n\n**Update**: Voor de kwetsbaarheid met kenmerk CVE-2026-62911 is proof-of-concept-code gepubliceerd. Deze kwetsbaarheid stelt een ongeauthenticeerde kwaadwillende in staat om willekeurige code uit te voeren. Zodoende krijgt de kwaadwillende bijvoorbeeld toegang tot mailboxen van Exchange-gebruikers, en kan de kwetsbaarheid worden misbruikt voor het uitvoeren van verdere aanvallen op het netwerk van het slachtoffer.", "creation_timestamp": "2026-08-29T01:00:34.473593Z"}, {"uuid": "129ad913-47ca-454c-849b-cb0485ce06fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62589", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqiihr73c2u", "content": "\ud83d\udccc CVE-2026-62589 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62589", "creation_timestamp": "2026-08-23T09:37:06.964686Z"}, {"uuid": "4245e16d-f6a2-422f-9368-ad715022aecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62842", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:37.155629Z"}, {"uuid": "ce2249f0-2820-413f-a0c5-6653faadf6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62896", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:34.270285Z"}, {"uuid": "ea6892c9-28cc-42e0-bead-88b26fdab0ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62836", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:34.600205Z"}, {"uuid": "07f67c50-a023-4932-95ad-060da150921f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62917", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:44.584230Z"}, {"uuid": "b85f3167-b1c2-467e-89bd-da15314b2d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62918", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:34.775556Z"}, {"uuid": "de9d713f-bfc3-40de-ae4f-eff924697827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62882", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:41.156936Z"}, {"uuid": "8ed2c15c-8d96-4d5d-b07f-e4b4bd48a063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62829", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:42.909068Z"}, {"uuid": "c41b08f5-7199-4f20-8fde-587d191388bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62837", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:43.035895Z"}, {"uuid": "2f71972b-3750-4044-a7d7-a54583a4bae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62839", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:44.524806Z"}, {"uuid": "04aa7c46-9893-461b-b954-26ae7befca25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62827", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286", "content": "Microsoft heeft kwetsbaarheden verholpen in diverse Office producten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade zoals beschreven in onderstaande tabel.\n\nVoor succesvol misbruik moet de kwaadwillende het slachtoffer misleiden een malafide bestand te openen of link te volgen.\n\nIn onderstaande tabel wordt de kwetsbaarheid met kenmerk **CVE-2026-65667** genoemd met een CVSS score van 10.0. Ook worden de kwetsbaarheden met kenmerk **CVE-2026-50515, CVE-2026-62896** en **CVE-2026-70332** genoemd, elk met een CVSS score van 9 en hoger.\nDeze kwetsbaarheden zijn echter reeds centraal verholpen door microsoft en slechts opgenomen ter informatie. Hiervoor zijn geen acties vereist.\n\nDe kwetsbaarheid met kenmerk **CVE-2026-70306** heeft ook een CVSS score hoger dan 9 en vereist **wel** actie. Deze kwetsbaarheid bevindt zich in Sharepoint en stelt een kwaadwillende in staat om middels een Cross-site-scripting-aanval willekeurige code uit te voeren in de context van het slachtoffer.\n\n**UPDATE**:\nOnderzoekers melden actief misbruik te hebben waargenomen van de kwetsbaarheid met kenmerk CVE-2026-63520. Deze bevindt zich in SharePoint en stelt een kwaadwillende in staat om willekeurige code uit te voeren op het kwetsbare systeem. Met name Sharepoint installaties die publiek toegankelijk zijn lopen hierdoor hoog risico op actief misbruik.\n\n```\nMicrosoft OneDrive: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65680 | 6.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure SQL Managed Instance: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62836 | 8.70 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams for Android: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65768 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65767 | 8.80 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62896 | 9.60 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62918 | 7.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65667 | 10.0 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Word: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63518 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63521 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70311 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70310 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70319 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-58651 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63525 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63528 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63527 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63530 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63531 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64905 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64907 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64915 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64917 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66806 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-66810 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-63513 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63515 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63517 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63519 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65657 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65656 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65661 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65664 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68792 | 7.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70315 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70314 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70317 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70323 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-62842 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63524 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63526 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63529 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63532 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63533 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64898 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64899 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-64903 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64904 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64909 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64910 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64911 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70130 | 8.40 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office PowerPoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-68809 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70312 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70313 | 7.80 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70316 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70325 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70320 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70322 | 5.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Excel: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65807 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68793 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68794 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68795 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68796 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68800 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68802 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68807 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68806 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68808 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68810 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68811 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68813 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68815 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68816 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70318 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70327 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-70328 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68797 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68798 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68799 | 5.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-68801 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68803 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68804 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68805 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68812 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68814 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-68817 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Outlook: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-70329 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-62882 | 4.30 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\nAzure Service Bus: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-50515 | 9.90 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office Access: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-64906 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64912 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64908 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64914 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64920 | 7.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64919 | 7.80 | Uitvoeren van willekeurige code     | \n|----------------|------|-------------------------------------|\n\nMicrosoft Teams Mobile: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-65769 | 6.50 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nMicrosoft Office SharePoint: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-57105 | 8.00 | Voordoen als andere gebruiker       | \n| CVE-2026-62829 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-62827 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-62837 | 6.50 | Toegang tot gevoelige gegevens      | \n| CVE-2026-63514 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-63512 | 6.50 | Manipulatie van gegevens            | \n| CVE-2026-63516 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-63520 | 8.10 | Uitvoeren van willekeurige code     | \n| CVE-2026-64922 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-65658 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65663 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-65660 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-65665 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70321 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70324 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70355 | 7.30 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-64897 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64900 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64902 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64901 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-64916 | 4.60 | Voordoen als andere gebruiker       | \n| CVE-2026-64921 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-66805 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-66808 | 8.80 | Uitvoeren van willekeurige code     | \n| CVE-2026-70306 | 9.30 | Voordoen als andere gebruiker       | \n| CVE-2026-70326 | 8.80 | Verkrijgen van verhoogde rechten    | \n| CVE-2026-70332 | 9.60 | Voordoen als andere gebruiker       | \n| CVE-2026-58639 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62839 | 6.50 | Voordoen als andere gebruiker       | \n| CVE-2026-62917 | 4.60 | Voordoen als andere gebruiker       | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-08-28T01:00:42.962197Z"}, {"uuid": "52fb0010-cb5f-4184-987b-fa54080fc91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mtx6fxkvpy2i", "content": "Critical Typebot flaw, because basic security was clearly too much paperwork\nPANIC 91% | Lag 0.0h | Typebot self-hosted versions up to and including 3.17.1 contain CVE-2026-62862, a critical vulnerabi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-08-26T01:25:23.453777Z"}, {"uuid": "b01106eb-0519-476d-bcca-5e269f0dbdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62498", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:25.834703Z"}, {"uuid": "c628ed68-f8bf-4ac1-865e-27833dccc49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62546", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:51.195874Z"}, {"uuid": "b5066a41-e310-4306-abac-83fef4796429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62565", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:08.787759Z"}, {"uuid": "0428ec9d-9a60-4309-a355-ae02b9371a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62464", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:52.573055Z"}, {"uuid": "9f19dc7e-c017-46c6-babb-3b4fe9995a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62468", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:58.048774Z"}, {"uuid": "fc4048b9-7c14-4ade-abc3-84321a7d3ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62518", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:41.136844Z"}, {"uuid": "ad1017ae-fedb-48ec-ab93-87aabea1a750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62549", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:58.606143Z"}, {"uuid": "dd5273d5-37a6-44c9-8db6-64e25175855d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62534", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:48.520205Z"}, {"uuid": "29e5ad4a-f12d-4983-b42f-f5c03223e21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62451", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:47.606531Z"}, {"uuid": "50320329-2ba9-4e32-819d-30163f295566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62513", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:30.770750Z"}, {"uuid": "a22e7153-fbc3-45ae-9613-02d2fe26d07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62493", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:13.125020Z"}, {"uuid": "0f1a4fed-19c3-43c9-8cda-819f40ec6d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62495", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:18.100532Z"}, {"uuid": "89d38667-3f52-4b39-bcd7-cb44d5d3e385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62514", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:33.239833Z"}, {"uuid": "dfbcab81-2038-4388-859b-e4b78b482e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62515", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:35.718991Z"}, {"uuid": "f53f85f2-b4a6-400a-a1c0-d63062aee1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62557", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:01.289493Z"}, {"uuid": "e3e2818f-8615-40b3-823b-beadaae4d72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62567", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:11.257557Z"}, {"uuid": "d62f1a03-efe7-4e1f-bff1-ffc853906f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtx7ab36q42f", "content": "CVE-2026-62862 - typebot.io\nIf you run a self\u2011hosted TypeBot version up to 3.17.1, the email login link uses a simple 6\u2011digit number that can be guessed repeatedly. An attacker who knows a user's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#typebotio #baptistearno #CVE #infosec", "creation_timestamp": "2026-08-26T01:40:05.672488Z"}, {"uuid": "1013d21c-e25e-4e5a-9f29-83851c8ca977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62447", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:45.135046Z"}, {"uuid": "3b0f715c-ed70-4d56-be5a-727493fcd34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62530", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:46.057807Z"}, {"uuid": "9809f915-bb57-43f3-bc17-367855522cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62560", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:03.766127Z"}, {"uuid": "59618beb-751c-4ab8-baee-d5b9906f2fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62561", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:06.254485Z"}, {"uuid": "25d7b4bd-ddbb-4f62-951b-60a17e0b5a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62445", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:42.650288Z"}, {"uuid": "ce933667-7bd8-4316-b551-091ab1e0fa36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62496", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:20.766979Z"}, {"uuid": "095e9d15-95f5-4d4a-be5f-74f947327d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62443", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:39.914901Z"}, {"uuid": "aef3d992-ffce-47d8-a304-4c4400e69ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62466", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:55.091968Z"}, {"uuid": "1277299c-9c23-4700-a4e4-63767fedb329", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62473", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:05.453911Z"}, {"uuid": "eb4e210e-1404-46f5-a091-32d843cd44f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62494", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:15.621752Z"}, {"uuid": "fb2fa4a5-a71e-49ee-abef-d8af9cc940b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62521", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:43.609919Z"}, {"uuid": "189d7b41-53d8-49cf-a11f-6c265e41c0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62456", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:19:50.088180Z"}, {"uuid": "75f36023-39f6-4f62-a31f-7dbe510a46a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62547", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:53.672380Z"}, {"uuid": "70c9aa6b-dddc-49b9-b767-2ad56ab57d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62548", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:56.144268Z"}, {"uuid": "537ad878-bd02-439c-8a33-7f1aa7861e76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62469", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:00.532080Z"}, {"uuid": "89583b76-d52e-4125-8146-4db65327cd19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62472", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:02.994436Z"}, {"uuid": "5d957513-07b1-4997-a8e1-b772469ee218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62476", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:07.925066Z"}, {"uuid": "7f5f0d38-80a0-4685-81da-9b1d83df0e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62478", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:10.397517Z"}, {"uuid": "a38eab5b-6b18-4bd0-9629-a01e926d545e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62497", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:23.378625Z"}, {"uuid": "a3a9c7c8-9c07-4d91-9483-5b18aca534dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62504", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:28.294860Z"}, {"uuid": "e8e8ad09-97c3-4fb8-9244-bdb97c5b9f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62516", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:20:38.402939Z"}, {"uuid": "a3f73e8a-b904-424b-aefb-51fd47d6fba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62574", "type": "seen", "source": "https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9", "content": "", "creation_timestamp": "2026-07-23T18:21:13.771618Z"}, {"uuid": "eb6fecf6-7a05-4475-8194-439303d3e4ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62294", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mrdmtg2tub2n", "content": "[Backport release-26.05] flameshot: toctou symlink attack fix (CVE-2026-62294)\n\nhttps://github.com/NixOS/nixpkgs/pull/544600\n\nhttps://tracker.security.nixos.org/issues/NIXPKGS-2026-2209\n\n#security", "creation_timestamp": "2026-07-23T19:59:49.061123Z"}, {"uuid": "6f295b8d-2380-47d8-97df-56c93f72e814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62825", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mre3pkjytc2z", "content": "CVE-2026-62825 - azure key vault\nAn attacker can access sensitive data in Azure Key Vault without permission. This is a serious risk because it could lead to unauthorized changes or theft of sensitive information.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoft #CVE #infosec", "creation_timestamp": "2026-07-24T00:26:06.068187Z"}, {"uuid": "08fe9cb8-ecac-4e5d-846b-eab3a436e302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62825", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116972717625342012", "content": "CVE-2026-62825 (CRITICAL, CVSS 10): Improper authentication in Microsoft Azure Key Vault enables remote privilege escalation. Microsoft has issued a fix for this cloud service. No active exploitation reported. More info: https://radar.offseq.com/threat/cve-2026-62825-cwe-287-improper-authentication-in-microsoft-azure-key-vault-8080269c662e81d1 #OffSeq #Azure #InfoSec #CloudSecurity", "creation_timestamp": "2026-07-24T03:00:25.101162Z"}, {"uuid": "ba1f6fd4-3b67-42b7-a115-4be372742048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62825", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mreedkeugo2q", "content": "Microsoft Azure Key Vault hit by CRITICAL improper authentication flaw (CVE-2026-62825, CVSS 10). Remote privilege escalation possible \u2014 fix deployed by Microsoft. Review guidance: https://radar.offseq.com/threat/cve-2026-62825-cwe-287-improper-authentication-in-microsoft-azure-key-vault-8080269c...", "creation_timestamp": "2026-07-24T03:00:27.358227Z"}, {"uuid": "1b77ec2a-aec0-486c-a12d-4c8b7c7aea5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62825", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mreedpboug2w", "content": "\ud83d\udd34 CVE-2026-62825 - Critical (10)\n\nImproper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62825/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T03:00:32.376318Z"}, {"uuid": "de17896e-ecb3-4f7b-b048-3a94acec37c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62636", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqp6zxtct2v", "content": "\ud83d\udccc CVE-2026-62636 - Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version th... https://www.cyberhub.blog/cves/CVE-2026-62636", "creation_timestamp": "2026-08-23T11:37:06.642880Z"}, {"uuid": "289081e0-375f-4a23-909c-4635211254b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62384", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtqqsekavk26", "content": "CVE-2026-62384 - Symlink sandbox bypass in NLTK FramenetCorpusReader. Arbitrary XML file read. CVSS 7.5. Update to 3.10.2 now. #CVE #NLTK #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62384/", "creation_timestamp": "2026-08-23T12:06:00.024848Z"}, {"uuid": "3641cbb0-cfe6-4a5b-9afe-e6721cf2ba62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62825", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mrf7mjx2232v", "content": "CVE-2026-62825 - Critical auth bypass in Azure Key Vault. CVSS 10.0. No patch available. Attackers can elevate privileges over network. Mitigate immediately. #CVE #Azure #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62825/", "creation_timestamp": "2026-07-24T11:08:39.386842Z"}, {"uuid": "5e0b11ea-471a-4273-bbc3-7d9c3a96f507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62825", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116974637468870269", "content": "CVE-2026-62825 - Critical auth bypass in Azure Key Vault. CVSS 10.0. No patch available. Attackers can elevate privileges over network. Mitigate immediately. #CVE #Azure #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62825/", "creation_timestamp": "2026-07-24T11:08:39.707349Z"}, {"uuid": "4d0193de-ffb0-413f-91c3-4b8f26be58d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62384", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117144732717578827", "content": "CVE-2026-62384 - Symlink sandbox bypass in NLTK FramenetCorpusReader. Arbitrary XML file read. CVSS 7.5. Update to 3.10.2 now. #CVE #NLTK #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62384/", "creation_timestamp": "2026-08-23T12:06:07.341276Z"}, {"uuid": "344068fb-2564-4ec5-b2d1-51b2227d383e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqquombco2y", "content": "\ud83d\udccc CVE-2026-62625 - Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).   The supported version th... https://www.cyberhub.blog/cves/CVE-2026-62625", "creation_timestamp": "2026-08-23T12:07:06.847865Z"}, {"uuid": "042f9af0-bc90-47d5-929f-5cdca3d221e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrg6gmeec42a", "content": "CVE-2026-62835 - azure portal\nThe Azure Portal has a security issue that allows unauthorized users to access sensitive information. This could lead to data breaches and unauthorized access to accounts.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azureportal #microsoft #CVE #infosec", "creation_timestamp": "2026-07-24T20:20:06.193276Z"}, {"uuid": "7197623c-9170-433a-9475-9cf807aefa16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116976907530516421", "content": "\ud83d\udea8 CVE-2026-62835: Microsoft Azure Portal Information Disclosure Vulnerability\nCVE-2026-62835 involves a flaw in the authorization process of Online Services, enabling attackers to access restricted information. The vulnerability documented by this CVE requires no customer action to resolve.\nCVSS: 9.3\nMore information: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62835", "creation_timestamp": "2026-07-24T20:45:57.849242Z"}, {"uuid": "103ca864-bab1-43c3-a1db-e735408e99ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62263", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkotfvw2y", "content": "CVE-2026-62263 - org.openidentityplatform.openam:openam-auth-webauthn\nOpenAM's WebAuthn feature has a security issue that allows an attacker to run malicious code on the system. This is because OpenAM doesn't properly\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:04.418924Z"}, {"uuid": "0aec4a50-332a-472b-b3ec-d8e715f2075c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrgbkqdtsk2i", "content": "CVE-2026-62379 - org.openidentityplatform.openam:openam-core\nA security flaw in OpenAM allows an attacker to run code on the server without logging in. This affects all OpenAM versions up to 16.1.1. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#Java #CVE #infosec", "creation_timestamp": "2026-07-24T21:16:05.736601Z"}, {"uuid": "16d357e6-6b00-4cf2-b306-d972efc441ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrge43rcsn2c", "content": "\ud83d\udd34 CVE-2026-62835 - Critical (9.3)\n\nImproper authorization in Azure Portal allows an unauthorized attacker to disclose information ov...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62835/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-24T22:01:36.255766Z"}, {"uuid": "d3280266-d2d5-47a4-aced-0761df37bfbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mrgetexqbe2g", "content": "Azure Portal\u306b\u8a8d\u53ef\u4e0d\u5099\u304c\u3042\u308a\u3001\u653b\u6483\u8005\u304c\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u60c5\u5831\u3092\u6f0f\u6d29\u3059\u308b\u53ef\u80fd\u6027\u304c\u3042\u308a\u307e\u3059\u3002\nCVE-2026-62835 CVSS 9.3 | CRITICAL", "creation_timestamp": "2026-07-24T22:14:37.224392Z"}, {"uuid": "8fa36590-f953-45d2-a9b6-2e0fe70c26f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62323", "type": "published-proof-of-concept", "source": "https://github.com/cloudreve/cloudreve/security/advisories/GHSA-c3jm-gv5r-9wcp", "content": "", "creation_timestamp": "2026-07-24T22:35:05.687858Z"}, {"uuid": "85d83743-f143-4b6b-9b89-73e1bf00be19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62586", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtqskcy2mk23", "content": "\ud83d\udccc CVE-2026-62586 - Vulnerability in the Siebel CRM Administration product of Oracle Siebel CRM (component: Data Archival).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62586", "creation_timestamp": "2026-08-23T12:37:06.676592Z"}, {"uuid": "07b6a139-5d9e-4a97-90aa-4b073d35db8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-microsoft-exchange-server", "content": "", "creation_timestamp": "2026-08-28T16:15:03.445255Z"}, {"uuid": "832ca3fa-6224-4d19-a25d-0098f2238d90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62835", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116978026055490912", "content": "CVE-2026-62835 (CRITICAL, CVSS 9.3) affects Microsoft Azure Portal: improper authorization enables remote info disclosure with high confidentiality impact. Microsoft has fixed server-side. More at https://radar.offseq.com/threat/cve-2026-62835-cwe-285-improper-authorization-in-microsoft-azure-portal-defd11bbcf2e17c7 #OffSeq #Azure #Vuln #CloudSecurity", "creation_timestamp": "2026-07-25T01:30:25.436013Z"}, {"uuid": "79c6c620-160c-4451-a5d6-a8ddb9443d2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62835", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrgprk2vls2r", "content": "CRITICAL vulnerability (CVE-2026-62835, CVSS 9.3) in Microsoft Azure Portal enables remote info disclosure via improper authorization. Microsoft has patched; check details: https://radar.offseq.com/threat/cve-2026-62835-cwe-285-improper-authorization-in-microsoft-azure-portal-defd11bbcf2e17c7 #Of...", "creation_timestamp": "2026-07-25T01:30:27.196388Z"}, {"uuid": "65aaf905-b59a-4dd0-9923-2f655ae94de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62835", "type": "seen", "source": "https://bsky.app/profile/leeroythegeek.bsky.social/post/3mrk545edq22g", "content": "Microsoft create a huge security issue by allowing unauthorised access to Azure portal API CVE-2026-62835\n\nAnd of fucking course MS stick the logs you need to review behind the pay as you go feature rather than provide them because they want to make money out of their incompetence \n\n#CyberSecurity", "creation_timestamp": "2026-07-26T10:07:00.656544Z"}, {"uuid": "3b8d0fb1-c54b-4d3a-990d-a46bc5c8b29a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62590", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtr4m6z66n2u", "content": "\ud83d\udccc CVE-2026-62590 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62590", "creation_timestamp": "2026-08-23T15:37:06.913470Z"}, {"uuid": "47dcb58a-5bcf-48a7-8cb0-5f1ffbd62cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/lemagit.bsky.social/post/3mtzwjh3q3r27", "content": "\ud83d\udea8 Vuln\u00e9rabilit\u00e9 critique Exchange (CVE-2026-62911) : \u00e9l\u00e9vation de privil\u00e8ges. Face \u00e0 l'exploit public, comment s\u00e9curiser vos serveurs ? Notre d\u00e9cryptage strat\u00e9gique vous donne les cl\u00e9s. \ud83e\uddd0\ud83d\udcbb #ITB2B [lire]", "creation_timestamp": "2026-08-27T03:42:09.975143Z"}, {"uuid": "3fa63d4f-b3fd-4f66-bf4a-4beb3475a67c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62596", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtr6btuxsi23", "content": "\ud83d\udccc CVE-2026-62596 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62596", "creation_timestamp": "2026-08-23T16:07:06.979884Z"}, {"uuid": "f4f014c9-da23-4fc2-a1f4-4372775326f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62384", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mtrbmyztzm26", "content": "CVE-2026-62384 - Symlink sandbox bypass in NLTK leads to arbitrary file read. CVSS 7.5. Update to version 3.10.2 now. #CVE #Python #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-62384/", "creation_timestamp": "2026-08-23T17:07:03.595302Z"}, {"uuid": "94eadc7a-c7af-434e-bae0-50f96e26f7eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62384", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117145916115746198", "content": "CVE-2026-62384 - Symlink sandbox bypass in NLTK leads to arbitrary file read. CVSS 7.5. Update to version 3.10.2 now. #CVE #Python #infosec\nhttps://www.valtersit.com/cve/CVE-2026-62384/", "creation_timestamp": "2026-08-23T17:07:05.729871Z"}, {"uuid": "61b50297-e613-45c9-ac55-a081883fb90b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62388", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu4nfwaa6c24", "content": "\ud83d\udccc CVE-2026-62388 - NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exce... https://www.cyberhub.blog/cves/CVE-2026-62388", "creation_timestamp": "2026-08-28T05:37:06.879733Z"}, {"uuid": "4b28c2bc-b586-408e-8040-d5e1f99eb20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62958", "type": "published-proof-of-concept", "source": "Telegram/FMxKlI5Q8oe-wqfdJhLf519zmPU2wTxgtOLa-sFM77th6qo", "content": "", "creation_timestamp": "2026-08-29T00:00:27.942730Z"}, {"uuid": "4c49a938-1759-451d-8453-6d11b33e1f87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62456", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmqwjr4hc2c", "content": "\ud83d\udccc CVE-2026-62456 - Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 1... https://www.cyberhub.blog/cves/CVE-2026-62456", "creation_timestamp": "2026-07-27T11:07:06.530605Z"}, {"uuid": "dc8b11ee-c4cb-4974-98cc-df7d852bf13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62530", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrmzcquajo2m", "content": "\ud83d\udccc CVE-2026-62530 - Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR).  Supported versions that are affected are 12.2.3-... https://www.cyberhub.blog/cves/CVE-2026-62530", "creation_timestamp": "2026-07-27T13:37:06.203412Z"}, {"uuid": "d8ab2002-d381-48a3-aed2-d6249f35ef81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mroxluom2g2o", "content": "CVE-2026-6251 - Chaty Pro\nCVE ID : CVE-2026-6251\n \n Published : July 28, 2026, 5:39 a.m. | 1\u00a0hour, 45\u00a0minutes ago\n \n Description : The Chaty Pro plugin for WordPress is vulnerable to Authenticated Time-Based Blind SQL Injection in versions up to and including 3.5.5. This is du...", "creation_timestamp": "2026-07-28T08:11:44.344576Z"}, {"uuid": "d2f6edfe-d2a7-4381-a228-79303168efda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62598", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mubpzf5e6p2m", "content": "\ud83d\udccc CVE-2026-62598 - Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).   The supported version that is affected is... https://www.cyberhub.blog/cves/CVE-2026-62598", "creation_timestamp": "2026-08-30T06:07:06.226227Z"}, {"uuid": "ea682cbd-f826-4d42-b520-5a21dfbd4cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62591", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtstwhr6wo23", "content": "\ud83d\udccc CVE-2026-62591 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62591", "creation_timestamp": "2026-08-24T08:07:07.309715Z"}, {"uuid": "c91c00e6-d94d-44e8-b63e-1dbd3a21b7a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62549", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrpjrovp2i2y", "content": "\ud83d\udccc CVE-2026-62549 - Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll).  Supported versions that are affected are 12.2.3-12.... https://www.cyberhub.blog/cves/CVE-2026-62549", "creation_timestamp": "2026-07-28T13:37:07.165875Z"}, {"uuid": "fdd64cbb-1990-4bc7-b4bf-7cc4d33eb7e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62432", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnqbkajb2q", "content": "CVE-2026-62432 - evtchn: Race between FIFO expand and reset\nCVE ID : CVE-2026-62432\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : The EVTCHNOP_expand_array hypercall checks for whether FIFO event\nchannels are enabled, but without holding the...", "creation_timestamp": "2026-07-28T14:47:54.423236Z"}, {"uuid": "2303a8b4-89dc-4e4d-8989-df80f34e2fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnsxql3y2b", "content": "CVE-2026-62435 - grant-table: version change racing with other operations\nCVE ID : CVE-2026-62435\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : [This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabil...", "creation_timestamp": "2026-07-28T14:49:24.857588Z"}, {"uuid": "bff18a95-5853-42a2-95f1-a82e45a698a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpnys3koc2s", "content": "CVE-2026-62431 - Viridian STIMER division by zero\nCVE ID : CVE-2026-62431\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : The logic to handle periodic Viridian STIMERs performs a division with an\nunchecked user-controlled divisor value, that c...", "creation_timestamp": "2026-07-28T14:52:40.256939Z"}, {"uuid": "3d9b590e-4937-4cc7-8498-103becb9f39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62429", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpo3xfugq2b", "content": "CVE-2026-62429 - vNUMA domain cleanup may race other operations\nCVE ID : CVE-2026-62429\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Accessing the vNUMA configuration data of a guest is still possible when\ndomain destruction has already sta...", "creation_timestamp": "2026-07-28T14:54:38.392851Z"}, {"uuid": "d8d58e44-22be-4d92-847b-5bf51660b7f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpo7czz472g", "content": "CVE-2026-62436 - grant-table: version change racing with other operations\nCVE ID : CVE-2026-62436\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : [This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabil...", "creation_timestamp": "2026-07-28T14:56:19.384590Z"}, {"uuid": "a3a43daf-3643-466c-ac50-6de0ed1ccc75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpogqrw7s22", "content": "CVE-2026-62434 - PoD: Don't try to reclaim special pages\nCVE ID : CVE-2026-62434\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : A guest started with Populated on Demand enabled (PoD) can attempt to\nreclaim pages which aren't regular guest RAM...", "creation_timestamp": "2026-07-28T15:00:28.590326Z"}, {"uuid": "68f4b1e9-d6c8-42cb-b5df-dfdb4c78e599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62423", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpol6b4fn24", "content": "Xen Security Advisory 497 v2 (CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425) - buffer overruns in libfsimage iso9660 handling", "creation_timestamp": "2026-07-28T15:02:56.846364Z"}, {"uuid": "11d7025a-fecf-44ce-8ce3-25d010c37602", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62424", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpol6b4fn24", "content": "Xen Security Advisory 497 v2 (CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425) - buffer overruns in libfsimage iso9660 handling", "creation_timestamp": "2026-07-28T15:02:56.883787Z"}, {"uuid": "fcb039d3-bfe7-42d2-af08-9e875899991f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62425", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpol6b4fn24", "content": "Xen Security Advisory 497 v2 (CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425) - buffer overruns in libfsimage iso9660 handling", "creation_timestamp": "2026-07-28T15:02:56.917700Z"}, {"uuid": "a9efaa1d-165d-4632-b7ea-88d6ffd4f9bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62426", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpou4pvvw2r", "content": "Xen Security Advisory 499 v2 (CVE-2026-62426,CVE-2026-62427) - sysctl and platform-op locks open to abuse", "creation_timestamp": "2026-07-28T15:07:59.873121Z"}, {"uuid": "c0176608-d178-462d-947e-3cd209d719d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62427", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpou4pvvw2r", "content": "Xen Security Advisory 499 v2 (CVE-2026-62426,CVE-2026-62427) - sysctl and platform-op locks open to abuse", "creation_timestamp": "2026-07-28T15:07:59.941804Z"}, {"uuid": "c1bffa3c-048a-491e-96b0-9b94273f9e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62430", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpozn6czb2o", "content": "CVE-2026-62430 - x86: Out-of-bounds read in vRTC emulation\nCVE ID : CVE-2026-62430\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Accesses to the CMOS memory contents are done using an indirect IO port\npair. Therefore Xen needs to cache the g...", "creation_timestamp": "2026-07-28T15:11:05.952431Z"}, {"uuid": "673fefab-95e3-4265-903b-9e53a8ece302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62435", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpp535lxd22", "content": "Xen Security Advisory 501 v4 (CVE-2026-62435,CVE-2026-62436) - grant-table: version change racing with other operations", "creation_timestamp": "2026-07-28T15:12:57.510363Z"}, {"uuid": "15dba35b-f965-407b-9ab4-c81564249fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62436", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpp535lxd22", "content": "Xen Security Advisory 501 v4 (CVE-2026-62435,CVE-2026-62436) - grant-table: version change racing with other operations", "creation_timestamp": "2026-07-28T15:12:57.569829Z"}, {"uuid": "70f9f477-661e-420e-b839-822dcfb71026", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62433", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrpp7ovqzg2s", "content": "CVE-2026-62433 - correct buffer checks for DM_OP hypercalls\nCVE ID : CVE-2026-62433\n \n Published : July 28, 2026, 1:19 p.m. | 1\u00a0hour, 21\u00a0minutes ago\n \n Description : Parts of the DM_OP handling code assumes the caller has provided the\nrequired number of buffers for the given o...", "creation_timestamp": "2026-07-28T15:14:25.468419Z"}, {"uuid": "9295f321-4f47-45d5-962d-02de1a7c0b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62428", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrppfzky7o24", "content": "Xen Security Advisory 500 v2 (CVE-2026-62428) - grant-table: type confusion in grant-copy", "creation_timestamp": "2026-07-28T15:17:58.063818Z"}, {"uuid": "1fa2d935-b929-4721-9762-332c881d0a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62429", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrppyjszco24", "content": "Xen Security Advisory 502 v3 (CVE-2026-62429) - vNUMA domain cleanup may race other operations", "creation_timestamp": "2026-07-28T15:28:18.978108Z"}, {"uuid": "f5a46710-a521-4098-b2ad-75523968e384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62433", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqbieqah2n", "content": "Xen Security Advisory 506 v2 (CVE-2026-62433) - correct buffer checks for DM_OP hypercalls", "creation_timestamp": "2026-07-28T15:33:19.283124Z"}, {"uuid": "6fdd850c-ab92-4320-bcf7-80734e5e8736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62430", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqkgtvdy24", "content": "Xen Security Advisory 503 v2 (CVE-2026-62430) - x86: Out-of-bounds read in vRTC emulation", "creation_timestamp": "2026-07-28T15:38:19.710051Z"}, {"uuid": "2f38dbbd-eecd-4f17-abb3-dfec82f915ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62431", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpqtfc6lg2u", "content": "Xen Security Advisory 504 v2 (CVE-2026-62431) - Viridian STIMER division by zero", "creation_timestamp": "2026-07-28T15:43:20.229691Z"}, {"uuid": "423c85f7-6db2-4444-a1db-b9e24ef49653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62432", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpr4drlts2d", "content": "Xen Security Advisory 505 v2 (CVE-2026-62432) - evtchn: Race between FIFO expand and reset", "creation_timestamp": "2026-07-28T15:48:20.431664Z"}, {"uuid": "a733c540-8f54-405f-bf2d-893211d5a095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62434", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mrpr65dajo24", "content": "Xen Security Advisory 507 v2 (CVE-2026-62434) - PoD: Don't try to reclaim special pages", "creation_timestamp": "2026-07-28T15:49:20.749476Z"}, {"uuid": "0addf8c7-066b-4f14-9dd9-5c1576edfa7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62595", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtsvm3z2i623", "content": "\ud83d\udccc CVE-2026-62595 - Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration).  Supported versions that are affected are 25.1... https://www.cyberhub.blog/cves/CVE-2026-62595", "creation_timestamp": "2026-08-24T08:37:06.807168Z"}, {"uuid": "e11fec91-5adf-4811-8274-145a4134ee89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62535", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mu3pad7ygw2y", "content": "\ud83d\udccc CVE-2026-62535 - Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation and Configuration).   The supported... https://www.cyberhub.blog/cves/CVE-2026-62535", "creation_timestamp": "2026-08-27T20:37:07.090851Z"}, {"uuid": "7aa2de40-edb2-44c3-b584-07bf08a18367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.036724Z"}, {"uuid": "f60d50e7-4cc1-4397-bfc7-71c9b7d79753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62263", "type": "seen", "source": "https://bsky.app/profile/roguelogics.bsky.social/post/3mrpzd6lcjb2p", "content": "Two critical OpenAM vulnerabilities demand attention: CVE-2026-62379 and CVE-2026-62263. Both are unauthenticated and pose serious risks. Patch your OpenAM instances immediately #OpenAM #CyberSecurity #VulnerabilityAlert", "creation_timestamp": "2026-07-28T18:15:20.089112Z"}, {"uuid": "1909a136-6028-4de4-a517-7cefc91395a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62464", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mrqbapk2sk22", "content": "\ud83d\udccc CVE-2026-62464 - Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).  Supported versions that are affected are 12.... https://www.cyberhub.blog/cves/CVE-2026-62464", "creation_timestamp": "2026-07-28T20:37:07.419606Z"}, {"uuid": "52cd7fc3-f314-4e5f-9b52-1d882a735fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62325", "type": "published-proof-of-concept", "source": "https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm", "content": "", "creation_timestamp": "2026-07-28T22:35:41.992643Z"}, {"uuid": "d9662568-8bb6-4f61-b8a3-5c00b49a15e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62325", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrqm5cwt5q2y", "content": "CVE-2026-62325 - patrickhener\nAn outdated version of goshs allows SFTP connections without a password. This is a security risk because it means anyone can access your SFTP server without needing a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#patrickhener #Golang #CVE #infosec", "creation_timestamp": "2026-07-28T23:52:04.557462Z"}, {"uuid": "bde59b7a-5e95-4903-87ff-e3f87c4684ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62325", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrqmmod6fj2d", "content": "\ud83d\udd34 CVE-2026-62325 - Critical (9.1)\n\ngoshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 unti...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62325/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T00:00:40.162550Z"}, {"uuid": "0576ae25-95a3-42d3-8fa1-7175a345aa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62325", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mrqrva7dds2b", "content": "Critical File Server Flaw, Another Masterclass in Internet Self-Harm\nPANIC 84% | Lag 0.0h | CVE-2026-62325 is a critical vulnerability in goshs, a single-binary file server used by red teamers\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-29T01:35:01.962577Z"}, {"uuid": "4536239b-16c6-4527-b098-61bceb899f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62325", "type": "seen", "source": "https://gist.github.com/alon710/b7d97e28e81c8217964934097e896a47", "content": "# CVE-2026-62325: CVE-2026-62325: Authentication Bypass in goshs SFTP Server via Missing Password Check\n\n> **CVSS Score:** 9.1\n> **Published:** 2026-07-28\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62325\n\n## Summary\nA critical authentication bypass vulnerability in the SFTP server module of goshs version 2.1.3 allows remote, unauthenticated attackers to read, write, modify, or delete files on the target hosting environment. This vulnerability is caused by an incomplete logic check during initialization that falls back to a password-less configuration when an empty password string is specified.\n\n## TL;DR\nConfiguring the goshs file server with an empty password causes the SFTP engine to bypass password handler registration. This defaults the underlying gliderlabs/ssh library to NoClientAuth=true, allowing unauthenticated network clients to gain full SFTP access.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-306\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 9.1 (Critical)\n- **Exploit Status**: Proof of Concept (PoC) Available\n- **KEV Status**: Not Listed\n- **Impact**: High (Confidentiality and Integrity)\n\n## Affected Systems\n\n- goshs\n- github.com/patrickhener/goshs/v2\n- goshs.de/goshs/v2\n- **goshs**: >= 2.1.3, < 2.1.4 (Fixed in: `2.1.4`)\n\n## Mitigation\n\n- Upgrade goshs binary to v2.1.4 or higher\n- Ensure basic authentication passwords are non-empty when using SFTP\n- Configure key-based authentication with -fkf to enforce key verification\n- Restrict network access to SFTP port 2121 using localized firewall structures\n\n**Remediation Steps:**\n1. Audit all active processes to detect running instances of goshs.\n2. Check command-line flags for configurations utilizing basic authentication with empty passwords (e.g., matching the regex pattern `-b ['\"]?[a-zA-Z0-9_-]+:['\"]?`).\n3. Kill the active process and download the latest version v2.1.4 release.\n4. Restart the service with strong, non-empty basic authentication credentials.\n\n## References\n\n- [GitHub Security Advisory GHSA-rjrw-mjq6-hpmm](https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm)\n- [Authentication Fix Commit](https://github.com/goshs-labs/goshs/commit/32f4a0e1790a709f722d0f3b2341f139d003180a)\n- [goshs v2.1.4 Release](https://github.com/goshs-labs/goshs/releases/tag/v2.1.4)\n- [goshs Project Repository](https://github.com/goshs-labs/goshs)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62325) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T08:31:18.120726Z"}, {"uuid": "9dcd8790-1b2c-42d2-b6f6-168a0f7eb82b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-62144", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/14fdbae9-44b1-4641-aab5-41c9e2d0417d", "content": "", "creation_timestamp": "2026-07-29T08:40:30.660602Z"}, {"uuid": "f528079a-b65b-4690-a571-df62567950f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-62145", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/14fdbae9-44b1-4641-aab5-41c9e2d0417d", "content": "", "creation_timestamp": "2026-07-29T08:40:30.660602Z"}, {"uuid": "f565ff7a-4a06-452f-a257-42ec3e076c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62834", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mtw3ufaznk2c", "content": "\ud83d\udccc CVE-2026-62834 - Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62834", "creation_timestamp": "2026-08-25T15:07:06.679922Z"}, {"uuid": "e096e71c-4596-48d0-a54e-142ec85e0df2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62423", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.388994Z"}, {"uuid": "5d4b66a4-8a4f-41e9-9437-408dc968e062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62424", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.439627Z"}, {"uuid": "d926b64b-c1af-4dc1-8b03-7fb6e146f1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62425", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.481061Z"}, {"uuid": "5a3b2af7-064b-4b6f-ae9b-5a8d930d1060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62426", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.787395Z"}, {"uuid": "847e4997-6ab1-4420-af2b-6a8e4e5a6d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62427", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.872622Z"}, {"uuid": "9a79f00f-3fec-4216-b211-333440b0a1a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62428", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.915602Z"}, {"uuid": "649793c4-ef00-49f6-a37f-aa2a0a5d0783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62429", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:21.963684Z"}, {"uuid": "bcff7922-50c9-4fbd-8c04-86ea9ffda9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62430", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.007177Z"}, {"uuid": "b76fdec8-c37a-40f4-8abf-c7374a3fe5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62431", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.047951Z"}, {"uuid": "81ba0ade-e86d-4edc-b17e-8a9ef70ab64d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62432", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.097141Z"}, {"uuid": "e7d3c384-db72-414d-99ff-0fa24c60aa8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62433", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.148713Z"}, {"uuid": "c85f0491-0b26-417e-939b-e4dd7022afa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62434", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.246057Z"}, {"uuid": "006ea90f-46c3-4910-ac12-b7a8a42a7e22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62435", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.300113Z"}, {"uuid": "7965b748-3dd0-4c45-96c2-c2ade0ffa995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62436", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3axvf5z24", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-42493, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425, CVE-2026-62426, CVE-2026-62427, CVE-2026-62428, CVE-2026-62429, CVE-2026-62430, CVE-2026-62431, CVE-2026-62432, CVE-2026-62433, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:22.347377Z"}, {"uuid": "961bf8f5-d219-4ec6-bf46-137c6b01e068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62428", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.274261Z"}, {"uuid": "091ede89-c116-4998-a26a-f94e1c7f53dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62431", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.322144Z"}, {"uuid": "43e84f9f-a72c-4671-b99c-1e95f28508a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62432", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.372769Z"}, {"uuid": "2fe00bd5-88d7-4578-bbe1-9a096425025c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62434", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.422699Z"}, {"uuid": "bb8c2291-5c52-4694-87d0-76a7da2aa6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62435", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.467129Z"}, {"uuid": "2ac5acb1-3ea0-4aae-a315-40b9e08c8ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62436", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mrs3b6du6w2q", "content": "\ud83d\udd17 CVE : CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436", "creation_timestamp": "2026-07-29T13:55:25.513546Z"}, {"uuid": "6671eec1-b3b8-4dce-988b-b013decbbded", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrssq4z4eg24", "content": "CVE-2026-6267 - Insertion of Sensitive Information Into Sent Data in GitLab\nCVE ID : CVE-2026-6267\n \n Published : July 29, 2026, 8:17 p.m. | 26\u00a0minutes ago\n \n Description : GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 be...", "creation_timestamp": "2026-07-29T20:55:17.431929Z"}, {"uuid": "097bbe77-fcba-4697-a5b4-b61f72654fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mrssz3rn6z23", "content": "\ud83d\udfe0 CVE-2026-6267 - High (8.5)\n\nGitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-6267/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-29T21:00:18.539857Z"}, {"uuid": "b5ee8cdc-de74-44f9-b8f2-3101b210efac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://infosec.exchange/users/obivan/statuses/117161647850600827", "content": "Pre-auth RCE on Exchange PoC https://github.com/hypnguyen1209/cve-2026-62911", "creation_timestamp": "2026-08-26T11:47:51.161225Z"}, {"uuid": "dfd2bb36-447d-4bf8-8186-13597c6d3377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://bsky.app/profile/obivan.infosec.exchange.ap.brid.gy/post/3mtyb743grlj2", "content": "Pre-auth RCE on Exchange PoC https://github.com/hypnguyen1209/cve-2026-62911", "creation_timestamp": "2026-08-26T11:47:57.824396Z"}, {"uuid": "6ad0dce3-d9ad-46ae-a53a-324bed820eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62878", "type": "seen", "source": "https://bsky.app/profile/shortinfo.bsky.social/post/3mubwtgdthx2w", "content": "The dangerous kind of bug is the one that needs no click. CVE-2026-62878 is a Windows DNS Server flaw rated 9.8 that lets an unauthenticated attacker run code remotely, and it is assessed as wormable. Microsoft $MSFT patched it in August alongside 421 other fixes.", "creation_timestamp": "2026-08-30T08:09:03.175370Z"}, {"uuid": "f4e963aa-9ee0-4d5a-a1df-fc7ed637b467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62183", "type": "published-proof-of-concept", "source": "Telegram/TpD_EhiVvoRRT5pQQyvb-1r61ahWr8WRyHVAuHr5I07s1ek", "content": "", "creation_timestamp": "2026-08-31T00:00:47.209095Z"}, {"uuid": "9b0d8743-5bc2-47cc-8607-0b614bf5fcac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mugbp5sbkv2u", "content": "Security researchers released technical details and PoC code for CVE-2026-62911, a critical Exchange Server pre-auth RCE flaw.\n\n#ExchangeServer #CVE202662911 #CyberSecurity #RCE #Pwn2Own", "creation_timestamp": "2026-09-01T01:34:09.771425Z"}, {"uuid": "3d5aa172-d65d-4809-8c33-806bec11d131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/diesec.bsky.social/post/3mugxbhmvzu25", "content": "Public exploit for CVE-2026-62911 (Exchange auth bypass) is live. 85% of German on-prem Exchange servers still vulnerable, per heise[.]de Fix is ESU-only for EOL 2016/2019 \u2014 no ESU, no patch. \n\ud83c\uddec\ud83c\udde7 diesec.com/2026/09/exch... \n\ud83c\udde9\ud83c\uddea diesec.com/de/2026/09/e... \n#CyberSecurity", "creation_timestamp": "2026-09-01T08:00:14.020466Z"}, {"uuid": "b3f1dac3-1cbe-4beb-8d35-d1cc1c1e51eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mugypvvghsyi", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain https://gbhackers.com/poc-released-for-microsoft-exchange-cve-2026-62911/", "creation_timestamp": "2026-09-01T08:26:10.910879Z"}, {"uuid": "a9010c6a-c42b-4116-a6e2-f14bcfe06715", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/13645", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-01T09:00:04.739454Z"}, {"uuid": "5fead39e-9119-4b3c-b385-375cdfbcbcce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3muhahrqamk2l", "content": "We are scanning & reporting daily on vulnerable Microsoft Exchange CVE-2026-62911 (Authentication Bypass by Capture-replay) instances in our Vulnerable Exchange reporting: www.shadowserver.org/what-we-do/n...\n\nAt least 21899 IPs seen unpatched 2026-08-31, top US (6.2K) & Germany (5.1K)", "creation_timestamp": "2026-09-01T10:44:52.302108Z"}, {"uuid": "e7658bff-19d6-44a2-83d0-f516cb742040", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3muhahuocf22l", "content": "We are scanning & reporting daily on vulnerable Microsoft Exchange CVE-2026-62911 (Authentication Bypass by Capture-replay) instances in our Vulnerable Exchange reporting: www.shadowserver.org/what-we-do/n...\n\nAt least 21899 IPs seen unpatched 2026-08-31, top US (6.2K) & Germany (5.1K)", "creation_timestamp": "2026-09-01T10:44:53.289469Z"}, {"uuid": "9ab36012-5aad-4688-a4c3-1c67eea75dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3muhahuodec2l", "content": "We are scanning & reporting daily on vulnerable Microsoft Exchange CVE-2026-62911 (Authentication Bypass by Capture-replay) instances in our Vulnerable Exchange reporting: www.shadowserver.org/what-we-do/n...\n\nAt least 21899 IPs seen unpatched 2026-08-31, top US (6.2K) & Germany (5.1K)", "creation_timestamp": "2026-09-01T10:44:54.237332Z"}, {"uuid": "32d64c04-72ab-4b95-aafd-d53e3c53efe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://infosec.exchange/users/shadowserver/statuses/117195377393797272", "content": "We are scanning & reporting daily on vulnerable Microsoft Exchange CVE-2026-62911 (Authentication Bypass by Capture-replay) instances in our Vulnerable Exchange reporting: https://www.shadowserver.org/what-we-do/network-reporting/vulnerable-exchange-server-report/\nAt least 21899 IPs seen unpatched 2026-08-31, top US (6.2K) & Germany (5.1K)\nDashboard World Map view stats: https://dashboard.shadowserver.org/statistics/combined/map/?date_range=1&map_type=std&source=exchange&source=exchange6&tag=cve-2026-62911%2B&data_set=count&scale=log&auto_update=on\nDashboard Tree Map stats: https://dashboard.shadowserver.org/statistics/combined/tree/?date_range=1&source=exchange&source=exchange6&tag=cve-2026-62911%2B&data_set=count&scale=log&auto_update=on\nNVD entry: https://nvd.nist.gov/vuln/detail/cve-2026-62911\nMS advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911\nDaily IP data tagged 'cve-2026-62911'\nSee also NCSC NL advisory: https://www.ncsc.nl/alerts/ernstige-kwetsbaarheden-in-microsoft-exchange-server", "creation_timestamp": "2026-09-01T10:45:44.356994Z"}, {"uuid": "a67e9d0b-9cbd-4df7-a09d-f73b70ab1a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/MalaysiaHacktivistz/24843", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-01T11:00:03.539564Z"}, {"uuid": "5246b810-780d-445d-9f8b-82754acfd73e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3muhgz6kq4u2h", "content": "Public PoC reveals pre-auth SYSTEM RCE in Microsoft Exchange via CVE-2026-62911. #MicrosoftExchange #CVE2026-62911 #RCE #Cybersecurity #NTLM #ExchangeSecurity https://thedailytechfeed.com/public-poc-for-microsoft-exchange-pre-auth-rce-reveals-major-risk/", "creation_timestamp": "2026-09-01T12:41:57.923498Z"}, {"uuid": "dadd4eca-4d8d-4292-8d07-a207c004cdd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3muhhvixkgp2r", "content": "Thousands of Exchange servers worldwide still vulnerable to CVE-2026-62911. Patch now to stop potentially full mailbox compromise. #Exchange #CVE2026 #Cybersecurity #Microsoft https://thedailytechfeed.com/thousands-of-microsoft-exchange-servers-still-vulnerable-to-major-security-flaw/", "creation_timestamp": "2026-09-01T12:57:44.536507Z"}, {"uuid": "0e95f60a-f6b6-4c73-b254-9e0e4f7e6947", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3muhndoarm32r", "content": "\ud83e\udd16 CVE-2026-62911: auth bypass (capture-replay) in Microsoft Exchange 2016/2019/SE. ~22k unpatched servers exposed, public exploit available online. Patch ASAP.\nhttps://www.bleepingcomputer.com/news/security/nearly-22-000-microsoft-exchange-servers-vulnerable-to-hijack-attacks/", "creation_timestamp": "2026-09-01T14:35:09.498616Z"}, {"uuid": "7cd3c79e-d01e-49ca-bb10-726c7da0be18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3muholm7u6b2r", "content": "CVE-2026-62735 is trending. Hype score 6, currently #5 on cvemon.\n\nHeap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-62735", "creation_timestamp": "2026-09-01T14:57:28.990973Z"}, {"uuid": "6d16b003-ccb6-4acb-9e19-9c015cfc3d0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/true_secator/8565", "content": "\u041f\u043e\u0447\u0442\u0438 22 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0432 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-62911, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041e\u0440\u0430\u043d\u0436\u0435\u043c \u0426\u0430\u0435\u043c \u0438\u0437 DEVCORE. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Exchange Server 2016, Exchange Server 2019 \u0438 Exchange Server Subscription Edition (SE).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Microsoft, \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 Microsoft Exchange Server \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Exchange.\n\nMicrosoft \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-62911 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0435\u0435 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC-NL) \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 21 899 IP \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 - \u0432 \u0421\u0428\u0410 (6200) \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (5100). \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u0445 - 809.\n\n\u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (BSI) \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e (\u043a\u0430\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Heise), \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 85% \u0432\u0441\u0435\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u043e\u0449\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-09-01T16:00:05.334664Z"}, {"uuid": "4cb78d4a-8b4c-4193-b231-1d44cb265bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mui2u6t2sr2r", "content": "CVE-2026-62911 is trending. Hype score 7, currently #7 on cvemon.\n\nAuthentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.\n\nhttps://cvemon.intruder.io/cves/CVE-2026-62911", "creation_timestamp": "2026-09-01T18:37:01.130593Z"}, {"uuid": "e6535da2-a517-4444-98bb-5e80ed1599a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mui4dgavup2t", "content": "\u26a0\ufe0f PATCH NOW\n\nMicrosoft Exchange has an auth-bypass flaw (CVE-2026-62911) that relays a server's own account into a webshell running as SYSTEM.\n\nA public exploit just dropped, and 21,899 servers are still exposed.\n\nPatch, then turn on Extended Protection.", "creation_timestamp": "2026-09-01T19:03:28.147488Z"}, {"uuid": "945eb998-a5fa-4405-8a00-f5f37ee39e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://infosec.exchange/ap/users/116769913619325742/statuses/117197334662384620", "content": "\u26a0\ufe0f PATCH NOW\nMicrosoft Exchange has an auth-bypass flaw (CVE-2026-62911) that relays a server's own account into a webshell running as SYSTEM.\nA public exploit just dropped, and 21,899 servers are still exposed.\nPatch, then turn on Extended Protection.\nhttps://suriq.io/blog/exchange-cve-2026-62911-auth-bypass-webshell-poc\n#CVE #Windows #infosec #cybersecurity", "creation_timestamp": "2026-09-01T20:36:07.132176Z"}, {"uuid": "57f7f65c-e005-4733-bc52-0f27a4d8b198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/pphm_HackerNews/2956", "content": "\ud83d\udd34 Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks\n\nNearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes.\n\nTracked as CVE-2026-62911 and reported by DEVCORE Research Team's Orange Tsai, this security flaw affects Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software. Threat actors with basic privileges on the targeted server can exploit it in low-complexity attacks that require user interaction.", "creation_timestamp": "2026-09-02T01:00:20.623596Z"}, {"uuid": "300d0de6-d1a7-4bf9-8135-131f261539a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/24843", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-02T01:05:08.606717Z"}, {"uuid": "98e8ed21-5756-47f6-a87d-f65fec7bc085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/13645", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-02T01:05:08.982963Z"}, {"uuid": "9d22a3e9-5bb7-4c47-90e3-9612eb2d0761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/true_secator/8565", "content": "\u041f\u043e\u0447\u0442\u0438 22 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0432 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-62911, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041e\u0440\u0430\u043d\u0436\u0435\u043c \u0426\u0430\u0435\u043c \u0438\u0437 DEVCORE. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Exchange Server 2016, Exchange Server 2019 \u0438 Exchange Server Subscription Edition (SE).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Microsoft, \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 Microsoft Exchange Server \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Exchange.\n\nMicrosoft \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-62911 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0435\u0435 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC-NL) \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 21 899 IP \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 - \u0432 \u0421\u0428\u0410 (6200) \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (5100). \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u0445 - 809.\n\n\u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (BSI) \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e (\u043a\u0430\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Heise), \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 85% \u0432\u0441\u0435\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u043e\u0449\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-09-02T01:05:05.750766Z"}, {"uuid": "2f83c1c5-63be-4e9a-a440-54b992df8aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62834", "type": "seen", "source": "https://bsky.app/profile/vulny-app.bsky.social/post/3muitf7dqa526", "content": "A critical-severity fix just shipped for Microsoft Azure Data Factory. If your stack uses it, patch to the fixed release soon. Quietly closes the gap before anyone goes looking. CVE-2026-62834", "creation_timestamp": "2026-09-02T01:56:02.053092Z"}, {"uuid": "b7d35875-afaa-4535-afeb-2d63d44c29bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3muiwiyc2p72s", "content": "Exchange Server\u306e\u4e8b\u524d\u8a8d\u8a3cRCE\u306e\u6982\u5ff5\u5b9f\u8a3c\uff08PoC\uff09\u3067\u3042\u308bCVE-2026-62911\u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\n\nCVE-2026-62911 Exchange Server Pre-Auth RCE PoC Released  #DailyCyberSecurity (Sep 1)\n\nsecurityonline.info/cve-2026-629...", "creation_timestamp": "2026-09-02T02:51:50.446293Z"}, {"uuid": "edcb04f2-0357-4562-9fef-95a01eabe700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muj4x3zyhc2g", "content": "\ud83d\udd34 CVE-2026-62911 \u2014 Microsoft Exchange at risk\n\nPublic PoC is now available while 21,899 Internet-facing Exchange servers remain vulnerable. No confirmed mass exploitation yet \u2014 but the window is closing.\n\nstemshop.top/blog/cve-202...\n\n#CVE #CVE202662911 #MicrosoftExchange #PoC #CyberSecurity", "creation_timestamp": "2026-09-02T04:47:13.838428Z"}, {"uuid": "23246b82-3184-43af-bd05-fba4d1022864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://t.me/Russian_OSINT/7736", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\nMicrosoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 PatchTuesday \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2026 \u0433\u043e\u0434\u0430, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u043e\u043a\u043e\u043b\u043e 400, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0438 \u0434\u0432\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 0-day.\n \n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 37 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0430 5 - EoP. \u0420\u0430\u0441\u043a\u043b\u0430\u0434 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:  176 - EoP, 11 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 110 - RCE, 86 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 - \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Mariner, Microsoft Teams, Microsoft Azure, Microsoft Entra, Microsoft Office \u0438 Power Apps, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Microsoft \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 0-day:\n\n- CVE-2026-68820: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Windows \u0434\u043b\u044f WinSock, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u041c\u043e\u0448\u0435 \u041c\u0430\u0440\u0435\u043b\u0443\u0441\u0443 \u0438 \u0414\u0430\u0432\u0438\u0434\u0443 \u0414\u0440\u0438\u043a\u0435\u0440\u0443 \u0438\u0437 Checkpoint. \u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 Lazarus \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b CVE-2026-68820 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Microsoft AFD.sys \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 FudModule, \u0440\u0443\u0442\u043a\u0438\u0442\u0430 \u0434\u043b\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u044f\u0434\u0440\u0430.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2026-62832: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0435\u0440\u0435\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u0443 (\u00ab\u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\u00bb) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u043e \u0434\u0435\u0442\u0430\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441\u00a00-day \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LegacyHive,\u00a0\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse.\n\n\u0423\u0438\u043b\u043b \u0414\u043e\u0440\u043c\u0430\u043d\u043d \u0438\u0437 Tharros \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u043b, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LegacyHive \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n- CVE-2026-72971: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0441\u0442\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Windows (unionfs.sys). Microsoft \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0442\u043e\u043c, \u0433\u0434\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 yhw \u0438 txz.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0435\u044e \u0441\u0438\u0441\u0442\u0435\u043c - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-09-02T06:00:16.791078Z"}, {"uuid": "f7e740c9-2ae8-4cd0-aea2-166d069b966f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mujcbrqrdu2q", "content": "Top 3 CVE for last 7 days:\nCVE-2026-41992: 41 interactions\nCVE-2026-60004: 16 interactions\nCVE-2026-65641: 13 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-62911: 10 interactions\nCVE-2026-70551: 8 interactions\nCVE-2026-83548: 7 interactions\n", "creation_timestamp": "2026-09-02T06:22:33.542388Z"}, {"uuid": "5d00cd06-b2cb-43b8-92d6-3e0f4fe98466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/it-connect.bsky.social/post/3mujbqqjf7e2i", "content": "\ud83d\uded1  22 000\n\nC'est le nombre de serveurs Exchange expos\u00e9s sur le Web et potentiellement vuln\u00e9rables \u00e0 la faille CVE-2026-62911. Il s'agit d'une faille patch\u00e9e en ao\u00fbt 2026 par Microsoft.\n\nPlus d'infos par ici : \n- www.it-connect.fr/microsoft-ex...\n\n#exchange #microsoft #infosec", "creation_timestamp": "2026-09-02T06:13:03.604953Z"}, {"uuid": "24070826-511e-4422-a904-a8571bce7598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62391", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mujvgkhxfs2j", "content": "\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027 - \u4fee\u6b63\u7248\u304c\u516c\u958b\n\n\u300cApache Spark\u300d\u306a\u3069\u306e\u51e6\u7406\u30a8\u30f3\u30b8\u30f3\u3092\u5229\u7528\u3057\u305fSQL\u51e6\u7406\u3084\u30d0\u30c3\u30c1\u51e6\u7406\u306e\u305f\u3081\u306e\u30a4\u30f3\u30bf\u30fc\u30d5\u30a7\u30fc\u30b9\u3092\u63d0\u4f9b\u3059\u308b\u300cApache Kyuubi\u300d\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u304c\u5224\u660e\u3057\u305f\u3002\u4fee\u6b63\u7248\u304c\u63d0\u4f9b\u3055\u308c\u3066\u304a\u308a\u3001\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u304c\u547c\u3073\u304b\u3051\u3089\u308c\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-62391\u300d\u306f\u3001\u300cCVE-2025-66518\u300d\u306e\u4fee\u6b63\u304c\u4e0d\u5b8c\u5168\u3060\u3063\u305f\u3053\u3068\u306b\u8d77\u56e0\u3057\u3001\u30ed\u30fc\u30ab\u30eb\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306e\u8a31\u53ef\u30ea\u30b9\u30c8\u3092\u56de\u907f\u3067\u304d\u308b\u8106\u5f31\u6027\u3002\u30b5\u30fc\u30d0\u30b5\u30a4\u30c9\u30ea\u30af\u30a8\u30b9\u30c8\u30d5\u30a9\u30fc\u30b8\u30a7\u30ea\uff08SSRF\uff09\u3084\u30aa\u30fc\u30d7\u30f3\u30d7\u30ed\u30ad\u30b7\u3068\u3057\u3066\u60aa\u7528\u3055\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308b\u300cCVE-2026-23904\u300d\u304c\u78ba\u8a8d\u3055\u308c\u305f\u3002", "creation_timestamp": "2026-09-02T12:05:14.822389Z"}, {"uuid": "d5769abd-e38f-4ced-847f-a90a4fd21960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3muk34ds5y22b", "content": "Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)\n\nwww.helpnetsecurity.com/2026/09/02/m...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-09-02T13:46:56.098529Z"}, {"uuid": "18e1f7c9-0793-4b00-a311-ad69d5a2fec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3muk37j7dw62b", "content": "\u7d0422,000\u53f0\u306eMicrosoft Exchange\u30b5\u30fc\u30d0\u30fc\u304c\u91cd\u5927\u306a\u8106\u5f31\u6027(CVE-2026-62911)\u306b\u5bfe\u3057\u3066\u4f9d\u7136\u3068\u3057\u3066\u7121\u9632\u5099\n\nShadowserver Foundation\u306b\u3088\u308b\u65e5\u6b21\u30b9\u30ad\u30e3\u30f3\u306b\u3088\u308b\u3068\u3001\u8a8d\u8a3c\u30d0\u30a4\u30d1\u30b9\u3092\u5f15\u304d\u8d77\u3053\u3059\u91cd\u5927\u306a\u8106\u5f31\u6027CVE-2026-62911\u306b\u5bfe\u3057\u3066\u3001\u7d0422,000\u53f0\u306eMicrosoft Exchange\u30b5\u30fc\u30d0\u30fc\u304c\u4f9d\u7136\u3068\u3057\u3066\u30d1\u30c3\u30c1\u672a\u9069\u7528\u306e\u72b6\u614b\u306b\u3042\u308b\u3053\u3068\u304c\u5206\u304b\u308a\u307e\u3057\u305f\u3002 \u7c73\u56fd\u3068\u30c9\u30a4\u30c4\u304c\u6700\u591a\u3067\u3001\u305d\u308c\u305e\u308c6...", "creation_timestamp": "2026-09-02T13:48:40.886842Z"}, {"uuid": "67398cba-8556-4549-bc08-94c5851fb05a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62388", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-p3m8-78j2-g5p3", "content": "", "creation_timestamp": "2026-09-02T16:35:03.055139Z"}, {"uuid": "88cef368-044e-45b5-94f2-ae36a50dda1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62680", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-cxq5-97v7-87j8", "content": "", "creation_timestamp": "2026-09-02T16:35:16.064629Z"}, {"uuid": "de1b481b-52f5-41af-a6c0-e142d23faf2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/luduan001.bsky.social/post/3muknacp2tq2c", "content": "\ud83d\udcbb TECH: Pre-auth exploit for Exchange CVE-2026-62911 is public \u2014 Shadowserver finds 21,899 servers exposed as of Aug 31, ~6,200 in US. Germany says 85% unpatched. No workaround; patch now, Exchange 2016/2019 ESU ends Oct 31.\n#Microsoft #CyberSecurity #TechNews\nhttps://dailytoolbox.org", "creation_timestamp": "2026-09-02T19:11:14.930464Z"}, {"uuid": "bb6a145f-e900-4891-bf5a-f05bca9f39f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62388", "type": "seen", "source": "https://gist.github.com/alon710/c7b1744220c73bf5f0357a6534139cbd", "content": "# CVE-2026-62388: CVE-2026-62388: Insecure Default Security Enforcement in Natural Language Toolkit (NLTK) Path Security Module\n\n> **CVSS Score:** 7.5\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62388\n\n## Summary\nCVE-2026-62388 represents a critical design flaw in the Natural Language Toolkit (NLTK) before version 3.10.0. The central security module (`nltk/pathsec.py`) initialized its validation enforcement flag to false by default. This fail-open configuration rendered security controls\u2014such as path traversal checks, zip archive audits, and SSRF validations\u2014non-blocking, only emitting warnings while permitting arbitrary file operations and code execution.\n\n## TL;DR\nNLTK versions prior to 3.10.0 initialized path security in an inactive 'fail-open' state by default, allowing attackers to bypass path traversal, SSRF, and zip-extraction protections.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-1188\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 7.5 (High)\n- **CVSS v4.0 Score**: 8.7 (High)\n- **EPSS Score**: 0.00457\n- **Exploit Status**: PoC / Structural Bypass documented\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Natural Language Toolkit (NLTK)\n- **NLTK**: < 3.10.0 (Fixed in: `3.10.0`)\n\n## Mitigation\n\n- Upgrade NLTK to version 3.10.0 or later.\n- Programmatically override the enforcement state via nltk.pathsec.ENFORCE = True in application entrypoints.\n- Implement network-level egress filtering to prevent SSRF vulnerabilities resulting from resource retrieval.\n- Configure Python's warning filters to raise errors on RuntimeWarnings triggered by NLTK's security validations.\n\n**Remediation Steps:**\n1. Identify all active deployments using NLTK versions prior to 3.10.0.\n2. Execute 'pip install --upgrade nltk>=3.10.0' to obtain the patched release.\n3. Verify the fix by checking that 'nltk.pathsec.ENFORCE' evaluates to True under default initialization.\n4. For systems where upgrading is deferred, inject a configuration script at bootstrap: 'import nltk.pathsec; nltk.pathsec.ENFORCE = True'.\n\n## References\n\n- [GitHub Security Advisory GHSA-p3m8-78j2-g5p3](https://github.com/nltk/nltk/security/advisories/GHSA-p3m8-78j2-g5p3)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/nltk-before-insecure-default-configuration-pathsec)\n- [NLTK Fix Commit](https://github.com/nltk/nltk/commit/155e40343cff0bf50d233e274a12e04d1428b1d9)\n- [NLTK Pull Request #3593](https://github.com/nltk/nltk/pull/3593)\n- [NLTK Release v3.10.0](https://github.com/nltk/nltk/releases/tag/v3.10.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62388) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T20:32:56.832446Z"}, {"uuid": "bc0634d3-bd8b-4602-bcfc-90aaf9d87aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-02T22:32:18.194521Z"}, {"uuid": "127c671f-bbae-4bc8-a472-7378694bd658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62675", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-756x-9hf6-q4h4", "content": "", "creation_timestamp": "2026-09-02T22:35:03.520380Z"}, {"uuid": "ebf153ff-ba32-4fba-8d93-dc3f13c0c60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62669", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mul3p4uzs42m", "content": "CVE-2026-62669 - grav\nAn outdated version of the Grav Login Plugin allows attackers to bypass two-factor authentication. This means an attacker can log in without the second security code, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#grav #getgrav #CVE #infosec", "creation_timestamp": "2026-09-02T23:30:04.976940Z"}, {"uuid": "01fd6f70-cc4f-401f-bd50-29c303be7266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62674", "type": "seen", "source": "https://gist.github.com/alon710/b615767eb56d905c1ec60c5678ca05fa", "content": "# CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent\n\n> **CVSS Score:** 9.0\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62674\n\n## Summary\nA critical validation flaw in the backend of the omnigent framework prior to version 0.3.0 allows authenticated users to overwrite the global shared agent bundle, leading to remote code execution on the runner process through malicious stdio MCP server configurations.\n\n## TL;DR\nA session update endpoint in the omnigent framework fails to restrict operations on shared/built-in agents, allowing low-privilege users to poison global agent templates and execute arbitrary system commands on runners.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-94\n- **Attack Vector**: Network\n- **CVSS Score**: 9.0\n- **EPSS Score**: 0.00343\n- **Exploit Status**: PoC\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- omnigent-ai/omnigent\n\n## Mitigation\n\n- Upgrade the omnigent package to version v0.3.0 or later to apply the validation fix.\n- Manually restrict session updates on shared/template agents where session_id is None.\n- Sandbox runner processes inside microVMs or strict Docker environments with limited egress traffic.\n\n**Remediation Steps:**\n1. Identify all deployed instances of omnigent running versions below 0.3.0.\n2. Apply the patch to omnigent/server/routes/sessions.py to introduce the check 'if agent.session_id is None'.\n3. Configure network egress rules on runners to allow only authorized destination IPs.\n4. Restart the omnigent server and runner components.\n\n## References\n\n- [NVD - CVE-2026-62674](https://nvd.nist.gov/vuln/detail/CVE-2026-62674)\n- [GitHub Security Advisory GHSA-jrrm-9hc7-2v3h](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-jrrm-9hc7-2v3h)\n- [GitHub Pull Request 1418](https://github.com/omnigent-ai/omnigent/pull/1418)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62674) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T00:00:27.580418Z"}, {"uuid": "b67b2cec-675f-4268-8668-ff1ba5bda79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://t.me/Russian_OSINT/7736", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\nMicrosoft \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 PatchTuesday \u0437\u0430 \u0430\u0432\u0433\u0443\u0441\u0442 2026 \u0433\u043e\u0434\u0430, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - \u043e\u043a\u043e\u043b\u043e 400, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043e\u0434\u043d\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0438 \u0434\u0432\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 0-day.\n \n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 42 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, 37 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 RCE, \u0430 5 - EoP. \u0420\u0430\u0441\u043a\u043b\u0430\u0434 \u043f\u043e \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u044f\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c:  176 - EoP, 11 - \u043e\u0431\u0445\u043e\u0434 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, 110 - RCE, 86 - \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, 21 - \u043f\u043e\u0434\u043c\u0435\u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 Mariner, Microsoft Teams, Microsoft Azure, Microsoft Entra, Microsoft Office \u0438 Power Apps, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Microsoft \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 0-day:\n\n- CVE-2026-68820: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 \u0432\u0441\u043f\u043e\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 Windows \u0434\u043b\u044f WinSock, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0433\u043e\u043d\u043a\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u041c\u043e\u0448\u0435 \u041c\u0430\u0440\u0435\u043b\u0443\u0441\u0443 \u0438 \u0414\u0430\u0432\u0438\u0434\u0443 \u0414\u0440\u0438\u043a\u0435\u0440\u0443 \u0438\u0437 Checkpoint. \u0412 \u0441\u0432\u043e\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u043d\u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 Lazarus \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b CVE-2026-68820 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0435 Microsoft AFD.sys \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 FudModule, \u0440\u0443\u0442\u043a\u0438\u0442\u0430 \u0434\u043b\u044f \u0440\u0435\u0436\u0438\u043c\u0430 \u044f\u0434\u0440\u0430.\n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0431\u044b\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u043e\u0434\u043e\u0432\u0430\u043d\u044b, \u0441\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2026-62832: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0441\u0441\u044b\u043b\u043e\u043a \u043f\u0435\u0440\u0435\u0434 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0444\u0430\u0439\u043b\u0443 (\u00ab\u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\u00bb) \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 \u043f\u0440\u043e\u0444\u0438\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e.\n\n\u0410\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438, \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0412\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f.\n\nMicrosoft \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u043e \u0434\u0435\u0442\u0430\u043b\u0438 \u0441\u043e\u0432\u043f\u0430\u0434\u0430\u044e\u0442 \u0441\u00a00-day \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c LegacyHive,\u00a0\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432 \u043f\u0440\u043e\u0448\u043b\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Nightmare Eclipse.\n\n\u0423\u0438\u043b\u043b \u0414\u043e\u0440\u043c\u0430\u043d\u043d \u0438\u0437 Tharros \u0440\u0430\u043d\u0435\u0435 \u0437\u0430\u044f\u0432\u043b\u044f\u043b, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437 \u043f\u0440\u0430\u0432 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c LegacyHive \u0434\u043b\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u0434\u0435\u043b\u0430 \u0440\u0435\u0435\u0441\u0442\u0440\u0430 \u0441 \u0446\u0435\u043b\u044c\u044e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043f\u043e\u0434 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n- CVE-2026-72971: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043d\u0435\u0441\u0442\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Windows (unionfs.sys). Microsoft \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0442\u043e\u043c, \u0433\u0434\u0435 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u043b\u0430 \u0435\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 yhw \u0438 txz.\n\n\u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043a\u0430\u0436\u0434\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0435\u044e \u0441\u0438\u0441\u0442\u0435\u043c - \u0437\u0434\u0435\u0441\u044c.", "creation_timestamp": "2026-09-03T00:00:46.660634Z"}, {"uuid": "9c0114d3-fe7b-471e-a400-d81c53baf255", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62669", "type": "published-proof-of-concept", "source": "https://github.com/getgrav/grav/security/advisories/GHSA-7mgc-c7pq-3rr3", "content": "", "creation_timestamp": "2026-09-03T00:35:07.237881Z"}, {"uuid": "d65a408a-c874-4640-82ea-f51dd30cb3f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mulcznpd772f", "content": "Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)\uff08\u7d042\u4e072,000\u53f0\u306eMicrosoft Exchange\u30b5\u30fc\u30d0\u30fc\u304c\u91cd\u5927\u306a\u8106\u5f31\u6027CVE-2026-62911\u306b\u672a\u5bfe\u5fdc\uff09 #HelpNetSecurity (Sep 2)\n\nwww.helpnetsecurity.com/2026/09/02/m...", "creation_timestamp": "2026-09-03T01:41:14.180239Z"}, {"uuid": "ebbceddb-0116-4954-8d4c-ee2745cb852b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/451e410f39c1329b0737b3f1ba4be364", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-03\n\n**Run time:** 2026-09-03T02:03:09.507008+00:00\n**Ideas cleared 15/25:** 25\n\n## 1. African Union launches its own credit ratings agency to challenge global dominance - Africa Business Insight\n\n**Score:** `20/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** High\n\n### The Gap\nThe AU's new ratings agency will need to ingest and normalize fragmented, multilingual financial data across 54 member states \u2014 most of which lacks the standardized public disclosure Western agencies rely on. Existing players (S&P, Moody's, Fitch) apply developed-market models that systematically misprice African sovereign and corporate risk, while real-time alternative data (mobile money flows, commodity movements, political signals) sits unused. Nobody owns the infrastructure layer that turns messy African financial reality into defensible, transparent ratings at scale.\n\n### Why Tardis Wins\nTardis's stack maps almost perfectly: Cloudflare Workers for edge ingestion from dozens of fragmented African exchanges and regulators; R2 for cheap storage of the firehose of filings, news, and alternative data; AI agents to extract structured signals from unstructured, multilingual African sources that incumbents don't even attempt to read; knowledge graphs to model the parent/cross-holding/sovereign-political entity networks that pure financial models miss. We can deliver a fresh, Africa-native methodology in weeks, not the multi-year build an incumbent would need \u2014 and do it at a fraction of their cost basis.\n\n### Approach\nFirst, build a working proof-of-concept that ingests 3-5 pilot African exchanges and central banks via Workers, normalizes filings through LLM extraction agents, and outputs a sample sovereign risk score using a knowledge-graph-backed model \u2014 then pitch it as the infrastructure backbone to the AU initiative, AfDB, or a tier-1 African sovereign (Nigeria, Kenya, South Africa) before they lock in an incumbent partner.\n\n### Revenue Model\nLicense the ratings/analytics platform as infrastructure-as-a-service to the AU agency itself, then layer on subscription APIs for institutional investors, African DFIs, and diaspora bond issuers hungry for non-Western-rated debt.\n\n### Risks\nThe AU could anchor the project to a Big Three incumbent (S&P/Moody's) or a politically-connected African conglomerate, and any ratings output perceived as politically captured will kill the initiative's credibility before it launches.\n\n**Source:** [https://africabusinessinsight.com/african-union-launches-its-own-credit-ratings-agency-to-challenge-global-dominance/](https://africabusinessinsight.com/african-union-launches-its-own-credit-ratings-agency-to-challenge-global-dominance/)\n\n---\n\n## 2. [Gaak Jae-won Column] The Climate Crisis and the Era of the Knowledge-perception Revolution (2): Easing Rules as an Excuse, But Heat Waves Keep Coming\n\n**Score:** `20/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nGovernments are loosening climate/environmental regulations while extreme heat events continue to escalate, creating a critical information asymmetry: businesses, insurers, and municipalities lack real-time, objective intelligence that correlates regulatory easing with actual physical climate risk exposure. The market currently has siloed weather data, lagging regulatory databases, and disconnected health impact studies\u2014no unified intelligence layer bridges policy intent with ground-truth outcomes.\n\n### Why Tardis Wins\nTardis can deploy Cloudflare Workers at the edge to ingest and normalize multi-jurisdictional regulatory feeds, climate sensor data, and health/energy demand signals into a single knowledge graph. AI agents built on this graph can detect 'regulatory arbitrage windows'\u2014flagging when deregulation rhetoric diverges from accelerating physical risk\u2014and push actionable alerts via AI Gateway before heat waves peak, something legacy consulting firms and static ESG databases cannot do in near-real-time.\n\n### Approach\nFirst, build a regulatory-climate divergence dashboard on Cloudflare Workers that scrapes Korean (and APAC) environmental regulatory feeds alongside live meteorological APIs and ER admission data, piping them into a D1-backed knowledge graph. Second, deploy a Tardis AI agent that scores jurisdictions by 'policy-physics gap' and offers subscription alerts to insurers, real estate funds, and HR/safety teams managing outdoor workforces.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$25k/mo) to insurers, infrastructure operators, and enterprise ESG/compliance teams who need forward-looking heat-wave and regulatory-risk intelligence.\n\n### Risks\nLiability exposure if predictive alerts are acted upon and prove wrong, plus political pressure from regulated entities who prefer the current information opacity.\n\n**Source:** [https://www.justeconomix.com/en-us/articles/152640](https://www.justeconomix.com/en-us/articles/152640)\n\n---\n\n## 3. China\u2019s zero tariff is an opportunity Africa must build capacity to use - Businessday NG\n\n**Score:** `19/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nChina's expanded zero-tariff access for African exporters only creates value if African SMEs and trade houses can actually identify eligible products, classify them under HS codes, generate certificates of origin, and match supply to Chinese buyer demand. Today that workflow is fragmented across PDFs from Chinese Customs, Nigerian/Ghanaian/Kenyan trade ministries, and HS code manuals \u2014 most African exporters simply don't know what they can ship duty-free or to whom. The capacity gap is information plumbing, not trade policy.\n\n### Why Tardis Wins\nTardis can build an LLM-powered trade agent that ingests Chinese tariff schedules, AfCFTA rules of origin, and bilateral preferential agreements into a knowledge graph keyed by HS code, then exposes a Cloudflare Worker API that answers 'what can I export from Lagos to Shenzhen duty-free, and who's buying?' in seconds \u2014 a stack incumbents like Avalara or TradeAtlas can't match on price-per-query because they target mid-market compliance teams, not African SMEs paying $20/month.\n\n### Approach\nStand up a data pipeline that scrapes Chinese Customs tariff announcements + AU member export HS-code manifests, build an agent that reasons over eligibility + generates preferential origin documentation, and pilot with one Nigerian trade promotion agency (NEPC or NACCIMA) before the policy window attracts well-funded competitors.\n\n### Revenue Model\nPer-eligibility-query SaaS for African exporters plus transaction fees on matched China-bound shipments, with a public-sector tier for trade ministries who want white-labeled capacity-building dashboards.\n\n### Risks\nChina's tariff preferences are unilateral and reversible, and African adoption of digital trade tools historically stalls on trust, payment rails, and last-mile onboarding \u2014 a great agent nobody uses generates zero revenue.\n\n**Source:** [https://businessday.ng/pro/article/chinas-zero-tariff-is-an-opportunity-africa-must-build-capacity-to-use/](https://businessday.ng/pro/article/chinas-zero-tariff-is-an-opportunity-africa-must-build-capacity-to-use/)\n\n---\n\n## 4. Report flagged Hilo bridge problems several years before collapse | Honolulu Star-Advertiser\n\n**Score:** `19/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nCritical infrastructure inspection findings are often trapped in static reports, fragmented agency systems, and manual follow-up processes, allowing known defects to remain unresolved until failure. The opportunity is an auditable early-warning platform that converts inspection reports into prioritized risks, assigns remediation actions, and continuously escalates overdue hazards.\n\n### Why Tardis Wins\nTardis can use AI agents to extract defects and recommendations from legacy documents, real-time pipelines to ingest sensor and maintenance data, and a knowledge graph to connect assets, inspections, contractors, funding, and unresolved actions. Cloudflare Workers, R2, D1, and AI Gateway enable a low-latency, cost-efficient platform that can be deployed across jurisdictions without replacing existing asset-management systems.\n\n### Approach\nBuild a pilot that ingests public bridge inspection reports for one jurisdiction, creates asset-level risk timelines, and alerts officials when high-severity findings lack documented remediation. Partner with a civil-engineering firm or municipal agency to validate prioritization rules and integrate the resulting dashboard into existing maintenance workflows.\n\n### Revenue Model\nSell annual SaaS contracts to transportation agencies and infrastructure operators, priced by asset count, with additional fees for integrations, document digitization, and compliance reporting.\n\n### Risks\nGovernment procurement cycles, inconsistent records, liability concerns, and the need for licensed engineers to validate AI-generated risk assessments could slow adoption.\n\n**Source:** [https://www.staradvertiser.com/2026/09/01/hawaii-news/report-flagged-hilo-bridge-problems-several-years-before-collapse/](https://www.staradvertiser.com/2026/09/01/hawaii-news/report-flagged-hilo-bridge-problems-several-years-before-collapse/)\n\n---\n\n## 5. Why Fixing Europe\u2019s Legacy Tech Problem is a Real AI Cyber Security Test - Cisco Blogs\n\n**Score:** `19/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nEuropean enterprises and public-sector organizations lack continuous visibility into legacy systems, unsupported software, hidden dependencies, and AI-amplified cyber risk. Existing asset-management and security platforms are often expensive, siloed, and poor at converting fragmented telemetry into prioritized modernization actions.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and real-time pipelines to collect and normalize edge, application, vulnerability, and dependency signals without requiring a large centralized deployment. AI agents backed by a knowledge graph can map legacy-system relationships, identify cascading risks, and generate evidence-based remediation plans faster and more affordably than incumbent consulting-led offerings.\n\n### Approach\nBuild a pilot that ingests software inventories, vulnerability feeds, Cloudflare telemetry, and architecture documents to produce a continuously updated infrastructure-decay risk graph. Partner with one European managed security provider or regulated mid-market organization to validate automated prioritization, compliance reporting, and modernization recommendations.\n\n### Revenue Model\nCharge an annual SaaS subscription based on assets or workloads monitored, with premium fees for compliance reporting, agent-assisted remediation, and managed modernization assessments.\n\n### Risks\nThe main challenge is earning access to sensitive infrastructure data while meeting European security, data-residency, explainability, and regulatory requirements.\n\n**Source:** [https://blogs.cisco.com/gov/fixing-europe-legacy-tech-ai-cybersecurity-test](https://blogs.cisco.com/gov/fixing-europe-legacy-tech-ai-cybersecurity-test)\n\n---\n\n## 6. BREAKING: SEC proposes N3 billion minimum capital for forex brokers, N5 billion for trading platforms - Nairametrics\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nNigerian forex brokers and trading platforms now face N3-5 billion minimum capital requirements, creating urgent demand for compliance infrastructure, capital optimization tools, and regulatory reporting systems that most local players lack internally.\n\n### Why Tardis Wins\nTardis's real-time data pipelines and AI agents can automate SEC compliance reporting at a fraction of the cost of building in-house systems, while Cloudflare Workers provides the low-latency infrastructure needed for trading platforms to meet operational requirements efficiently.\n\n### Approach\nPartner with local Nigerian fintech consultancies to offer compliance-as-a-service bundles; deploy pre-built compliance agents and data pipeline templates on Cloudflare that can be white-labeled for brokers.\n\n### Revenue Model\nSaaS subscription for compliance monitoring tools plus implementation fees for custom regulatory infrastructure deployments.\n\n### Risks\nRegulatory uncertainty - the SEC proposal may face pushback or delays, and Nigeria's market size may not justify immediate investment without confirmed enforcement timelines.\n\n**Source:** [https://nairametrics.com/2026/09/02/sec-proposes-n3-billion-minimum-capital-for-forex-brokers-n5-billion-for-trading-platforms/](https://nairametrics.com/2026/09/02/sec-proposes-n3-billion-minimum-capital-for-forex-brokers-n5-billion-for-trading-platforms/)\n\n---\n\n## 7. Isodora opens its compliance platform to Swedish small businesses: from SEK 500 a month instead of half a million in consulting fees - Realtid\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nSmall businesses globally are crushed by mandatory regulatory compliance costs that were designed for enterprises (the SEK 500k vs SEK 500/month gap is universal). Isodora just validated a SaaS model for one country\u2014one vertical\u2014but the underserved SMB compliance market spans every jurisdiction, every sector, and every language. No incumbent is serving this with AI-native, edge-deployed, continuously-updated regulatory intelligence.\n\n### Why Tardis Wins\nTardis's stack maps perfectly: Cloudflare Workers deploy compliance agents globally at near-zero marginal cost (critical when SMBs pay $50/mo, not $50k/yr); AI agents parse and cross-jurisdictionalize regulations in real time; knowledge graphs encode the regulatory web (which law triggers which obligation under which business profile) far better than static rule engines; data pipelines ingest regulator feeds, court rulings, and amendment notices the moment they publish. Isodora likely hard-codes Swedish rules\u2014Tardis can build a graph-based compliance brain that scales to 50 jurisdictions from day one.\n\n### Approach\nPick one high-friction vertical (India GST + labor compliance, or EU GDPR for SaaS startups) and ship an MVP that ingests regulatory sources, builds a knowledge graph of obligations per business profile, and deploys a Cloudflare Worker-backed agent that monitors each SMB's exposure and generates filing-ready outputs. Validate willingness-to-pay with 20 SMBs before expanding.\n\n### Revenue Model\nTiered SaaS subscription ($20\u2013$200/month per SMB) by jurisdiction count and vertical complexity, with premium tiers for AI-agent-driven filing automation and audit trail export.\n\n### Risks\nRegulatory liability is the landmine\u2014wrong compliance advice exposes Tardis to lawsuits and reputational ruin, so legal disclaimers, insurance, and human-in-the-loop review for high-stakes filings are non-negotiable from day one.\n\n**Source:** [https://www.realtid.se/pressmeddelande/isodora-opens-its-compliance-platform-to-swedish-small-businesses-from-sek-500-a-month-instead-of-half-a-million-in-consulting-fees/](https://www.realtid.se/pressmeddelande/isodora-opens-its-compliance-platform-to-swedish-small-businesses-from-sek-500-a-month-instead-of-half-a-million-in-consulting-fees/)\n\n---\n\n## 8. OpenPayd strengthens position in the U.S. market through the acquisition of 43 state licences | Currency News |  Financial and Business News | Markets Insider\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAcquiring 43+ state money transmitter licences is a multi-year, multi-million-dollar barrier that locks out most fintechs from operating across U.S. states. OpenPayd's bet validates that regulatory infrastructure is the moat \u2014 but it also exposes the unsolved upstream pain: there is no real-time, machine-readable intelligence layer that helps firms navigate, monitor, and act on the patchwork of state-by-state payment, licensing, and compliance rules as they evolve.\n\n### Why Tardis Wins\nTardis can build a 'regulatory arbitrage graph' on Cloudflare Workers \u2014 a knowledge graph modeling state/federal licences, capital requirements, permissible activities, and enforcement actions, continuously refreshed by AI-agent scrapers and data pipelines across state banking department feeds, FinCEN, and CFPB sources. Unlike legacy compliance vendors (Thomson Reuters, LexisNexis) that serve static legal lookups, Tardis's agentic stack can deliver proactive delta alerts, license-fit scoring, and automated filing pipelines that turn a 12-month compliance project into a continuous, queryable API.\n\n### Approach\nStand up a Cloudflare Worker orchestration layer that ingests state regulator feeds and NMLS updates into a D1-backed knowledge graph, then deploy AI agents to score licensing pathways for specific business models (MTL, payments, lending, crypto). Package the MVP as a '50-state licence navigator' API priced per jurisdiction-month, targeting cross-border fintechs entering the U.S.\n\n### Revenue Model\nSubscription API priced per jurisdiction and per entity type, plus premium agentic filing/monitoring workflows for fintechs pursuing U.S. licences.\n\n### Risks\nRegulatory data is fragmented, politically sensitive, and accuracy errors in licence guidance carry legal liability that demands strong disclaimers and human-in-the-loop review.\n\n**Source:** [https://markets.businessinsider.com/news/currencies/openpayd-strengthens-position-in-the-u-s-market-through-the-acquisition-of-43-state-licences-1036515026](https://markets.businessinsider.com/news/currencies/openpayd-strengthens-position-in-the-u-s-market-through-the-acquisition-of-43-state-licences-1036515026)\n\n---\n\n## 9. Truth or Consequences Water Crisis Exposes Century-Old Pipes Under\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nMunicipal water utilities across the US operate on infrastructure that is decades to centuries old, with no real-time visibility into pipe condition, failure risk, or asset health. Cities like Truth or Consequences only learn about decay after catastrophic failures, because incumbents rely on manual inspection, fragmented GIS systems, and siloed SCADA data that no one stitches together. There is no affordable, continuously-updating 'infrastructure decay intelligence layer' that municipalities can deploy without ripping out existing systems.\n\n### Why Tardis Wins\nTardis can ingest heterogeneous municipal data sources (SCADA telemetry, work-order history, soil/corrosion records, satellite imagery, weather feeds) via Cloudflare Workers, normalize them into a knowledge graph of pipe assets with condition scores, and run AI agents that predict failure zones weeks in advance. The AI Gateway plus R2 gives a cost structure incumbents like Bentley or ESRI cannot match for small-to-mid cities, and LLM-powered agents can generate plain-English briefings for city managers who aren't GIS experts.\n\n### Approach\nFirst, partner with one mid-size municipality (or a progressive US state DOT/water authority) to ingest their existing asset registry + 2-3 years of break history into a Cloudflare-hosted knowledge graph and ship a failure-prediction dashboard within 6 weeks. Second, use the pilot to productize a turnkey 'Infrastructure Decay Agent' template that other cities self-serve via the AI Gateway.\n\n### Revenue Model\nPer-municipality SaaS subscription tiered by population served, plus usage-based fees on AI Gateway compute for prediction runs and alerting.\n\n### Risks\nMunicipal procurement cycles are slow, risk-averse, and dominated by existing vendor lock-in (ESRI, Bentley, Accela), so landing the first design partner requires either a grant-funded pilot or a champion inside city hall.\n\n**Source:** [https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/](https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/)\n\n---\n\n## 10. Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) - Help Net Security\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\n22,000 unpatched Exchange servers reveal a massive attack-surface-visibility gap: organizations don't know what they own, what's exposed, or what's reachable from the internet. Traditional vulnerability scanners (Qualys, Tenable) are agent-based, slow, and priced for enterprises \u2014 leaving mid-market companies, public sector, and India's SMB/large-enterprise hybrid estates effectively blind between patch cycles.\n\n### Why Tardis Wins\nTardis can run a continuous, passive+active external attack-surface monitor entirely on Cloudflare Workers at the edge \u2014 distributed scanning from 300+ PoPs makes detection faster and harder to block than single-region scanners. AI agents can autonomously triage CVEs against discovered assets, a D1-backed knowledge graph maps server\u2192org\u2192exposure\u2192business-criticality, and the AI Gateway can ingest threat intel (NVD, CISA KEV, Shodan) into real-time R2/D1 pipelines that push alerts within minutes of disclosure \u2014 a 10x cost and latency advantage over legacy enterprise tooling.\n\n### Approach\nShip a focused MVP that (1) ingests active CVEs from NVD/CISA KEV via a Cloudflare Worker cron pipeline, (2) scans a curated set of Indian .in and enterprise domains for the specific exposure pattern, and (3) delivers a paid 'Am I Exposed?' report plus subscription monitoring \u2014 using the India tech-product positioning to wedge in against global incumbents.\n\n### Revenue Model\nTiered SaaS subscription per monitored asset/domain (e.g., \u20b9X/asset/month for continuous monitoring + \u20b9Y for one-shot CVE exposure reports), with premium AI-agent-led remediation playbooks sold to mid-market and enterprise security teams.\n\n### Risks\nScanning third-party infrastructure carries legal and ToS risk (must default to opt-in + authorized scanning only), and free public tools like Shodan/Censys commoditize raw exposure data \u2014 so the moat must come from AI-driven prioritization and remediation guidance, not just detection.\n\n**Source:** [https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/](https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/)\n\n---\n\n## 11. Amazon\u2019s new Texas data centre could become America\u2019s biggest single polluter. It will not touch the grid.\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe rapid buildout of off-grid, gas-powered data centres is outpacing conventional grid planning, emissions reporting, and regulatory oversight. Operators, investors, communities, and regulators lack a unified system that tracks private generation assets, permits, emissions, water use, and local infrastructure impacts in near real time.\n\n### Why Tardis Wins\nTardis can combine permitting records, satellite and sensor feeds, corporate disclosures, and utility data through real-time pipelines, then map facilities, owners, turbines, contractors, and environmental impacts in a knowledge graph. Cloudflare Workers can provide low-latency collection and alerting, while AI agents continuously detect permit changes, estimate emissions, identify inconsistencies, and generate evidence-backed risk reports faster than traditional ESG consultancies.\n\n### Approach\nBuild a Texas pilot that maps proposed and operating off-grid data centres against air permits, generation equipment, water constraints, ownership structures, and estimated emissions. Package the resulting dataset as a monitoring dashboard and API, then validate demand with infrastructure investors, insurers, environmental law firms, regulators, and affected municipalities.\n\n### Revenue Model\nSell subscriptions and API access for facility-level risk intelligence, with higher-priced custom due-diligence, compliance monitoring, and impact reports.\n\n### Risks\nThe main challenge is producing defensible estimates from incomplete permits and opaque operator disclosures without creating legal or reputational exposure.\n\n**Source:** [https://thenextweb.com/news/amazons-new-texas-data-centre-could-become-americas-biggest-single-polluter-it-will-not-touch-the-grid](https://thenextweb.com/news/amazons-new-texas-data-centre-could-become-americas-biggest-single-polluter-it-will-not-touch-the-grid)\n\n---\n\n## 12. Two planned datacentres will have higher UK carbon emissions than ExxonMobil, analysis finds | Datacentres - UK | The Guardian\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nRapid AI datacentre expansion is outpacing the ability of operators, regulators, and communities to measure projected carbon emissions, grid impact, water use, and progress against climate commitments. Existing sustainability reporting is fragmented, self-reported, and backward-looking, creating demand for independent, continuously updated infrastructure-impact intelligence.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and real-time pipelines to ingest planning applications, grid data, corporate disclosures, satellite signals, and energy-market feeds, while AI agents extract claims and flag inconsistencies. A knowledge graph linking facilities, owners, power suppliers, permits, emissions, and public commitments would provide more actionable intelligence than incumbent ESG dashboards built around periodic company reports.\n\n### Approach\nBuild a UK pilot that tracks planned and operating datacentres, calculates comparable emissions scenarios, and exposes evidence-backed facility profiles through alerts and an API. Validate it with energy analysts, local authorities, infrastructure investors, and climate-focused newsrooms before expanding to Europe and India.\n\n### Revenue Model\nSell subscriptions, API access, custom risk reports, and monitoring contracts to investors, regulators, utilities, insurers, developers, and research organizations.\n\n### Risks\nThe main challenge is producing defensible estimates from incomplete planning and energy data without overstating certainty or creating legal exposure.\n\n**Source:** [https://www.theguardian.com/uk-news/2026/aug/25/planned-datacentres-carbon-emissions-uk-exxonmobil](https://www.theguardian.com/uk-news/2026/aug/25/planned-datacentres-carbon-emissions-uk-exxonmobil)\n\n---\n\n## 13. Did China's AI Boom Melt the Himalayas? Nepal's Deadly Floods Raises Question About Data Centers and Climate | Green Prophet\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nThe rapid expansion of Asian data centers lacks transparent, auditable accounting for electricity, water use, emissions, and climate exposure, while claims connecting AI infrastructure to Himalayan flooding remain difficult to verify. Governments, insurers, communities, and operators need a shared system that distinguishes long-term attributable impacts from unsupported event-level causation and identifies infrastructure at risk from floods, heat, and water scarcity.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and real-time pipelines to ingest satellite, weather, hydrology, grid, permit, and facility data close to users across Asia, while AI agents continuously extract disclosures and flag anomalies. A knowledge graph can connect data centers, power sources, watersheds, operators, suppliers, and disaster events, producing evidence-backed risk scores and provenance trails more efficiently than conventional consulting or static ESG platforms.\n\n### Approach\nBuild a Himalayan and South Asian pilot that maps data centers and energy infrastructure against watershed stress, flood hazards, emissions intensity, and public disclosures, explicitly avoiding unsupported attribution of individual disasters. Recruit one insurer, infrastructure lender, or data-center operator as a design partner and deliver monitoring alerts, facility-level risk reports, and an auditable API.\n\n### Revenue Model\nSell annual enterprise subscriptions and API access to operators, insurers, lenders, regulators, and ESG teams, with premium fees for portfolio assessments and compliance reports.\n\n### Risks\nThe principal challenge is obtaining reliable facility-level energy and water data while preventing uncertain climate correlations from being presented as causal conclusions.\n\n**Source:** [https://www.greenprophet.com/2026/09/did-chinas-ai-boom-melt-the-himalayas-nepals-deadly-floods-raises-question-about-data-centers-and-climate/](https://www.greenprophet.com/2026/09/did-chinas-ai-boom-melt-the-himalayas-nepals-deadly-floods-raises-question-about-data-centers-and-climate/)\n\n---\n\n## 14. Data centres\u2019 carbon emissions are rising, and companies are getting a free ride. Time for an AI tax - The Globe and Mail\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAI companies and enterprise buyers lack credible, workload-level accounting for data-centre energy use, carbon emissions, water consumption, and potential AI-tax liabilities. Existing ESG tools rely heavily on coarse annual disclosures and rarely attribute environmental costs to individual models, agents, regions, or inference requests.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and AI Gateway to capture real-time workload telemetry at the inference layer, then combine it with grid-intensity, provider, and regional data through streaming pipelines. Knowledge graphs and AI agents can map workloads to suppliers, jurisdictions, emissions factors, and evolving regulations, producing auditable compliance reports and optimization recommendations faster than traditional ESG platforms.\n\n### Approach\nBuild an AI Carbon Ledger MVP that instruments AI Gateway traffic and estimates emissions and tax exposure by model, application, customer, and geography, initially targeting Indian enterprises and AI service providers. Pilot it with two or three customers, add verifiable data sources and methodology documentation, and expose dashboards, alerts, APIs, and procurement-ready reports.\n\n### Revenue Model\nCharge a usage-based SaaS fee for monitoring and reporting, with higher-priced compliance, optimization, audit-support, and enterprise API tiers.\n\n### Risks\nThe main challenge is earning trust when cloud providers disclose limited energy data and emissions estimates depend on contested methodologies and changing regulation.\n\n**Source:** [https://www.theglobeandmail.com/business/commentary/article-data-centres-carbon-emissions-rising-ai-tax/](https://www.theglobeandmail.com/business/commentary/article-data-centres-carbon-emissions-rising-ai-tax/)\n\n---\n\n## 15. Voyager 2 has been sailing through space for 49 years\u2014nearly eight of them beyond the heliopause\u2014while losing roughly four watts of power annually. In July 2026, engineers completed a risky all-at-once systems swap nicknamed the \u201cBig Bang,\u201d buying its three remaining instruments at least one additional year of operation. - ScienceBlog.com\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nLong-lived scientific and industrial systems often depend on aging hardware, fragmented telemetry, undocumented operational knowledge, and a shrinking pool of experts. There is an opportunity for a mission-continuity platform that detects degradation, models constrained system dependencies, preserves decision history, and safely recommends recovery or reconfiguration plans.\n\n### Why Tardis Wins\nTardis can use real-time pipelines and Cloudflare Workers to ingest and evaluate telemetry close to its source, while AI agents investigate anomalies and simulate operational playbooks. Knowledge graphs can connect components, power budgets, failure modes, procedures, and expert decisions, giving operators a traceable alternative to generic predictive-maintenance tools.\n\n### Approach\nBuild a proof of concept using public spacecraft telemetry and incident reports, demonstrating degradation forecasting, dependency mapping, and human-approved recovery recommendations. Then pilot the platform with Indian satellite operators, observatories, utilities, or industrial firms managing remote, high-value legacy assets.\n\n### Revenue Model\nCharge annual enterprise subscriptions based on assets and telemetry volume, with additional fees for deployment, knowledge-graph construction, compliance, and mission-support services.\n\n### Risks\nSafety-critical customers will require deterministic controls, strong cybersecurity, explainable recommendations, and extensive validation before allowing the platform to influence operations.\n\n**Source:** [https://scienceblog.com/t-voyager-2-has-been-sailing-through-space-for-49-years-nearly-eight-of-them-beyond-the-heliopause-while-losing-roughly-four-watts-of-power-annually-in-july-2026-engineers-completed-a-risky-all-at-onc/](https://scienceblog.com/t-voyager-2-has-been-sailing-through-space-for-49-years-nearly-eight-of-them-beyond-the-heliopause-while-losing-roughly-four-watts-of-power-annually-in-july-2026-engineers-completed-a-risky-all-at-onc/)\n\n---\n\n## 16. Africa\u2019s new credit rating agency faces trust test to cut borrowing costs - Businessday NG\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAfrica's new rating agency needs to overcome a credibility deficit against the Big Three (Moody's, S&P, Fitch), who are widely accused of systematically overrating African sovereign risk and inflating borrowing costs. The core gap is data infrastructure\u2014African sovereign, sub-sovereign, and corporate credit signals are fragmented across central banks, mobile money operators, satellite feeds, and informal markets, with no unified real-time layer to underwrite alternative ratings at scale.\n\n### Why Tardis Wins\nTardis can build the data ingestion and analysis layer beneath the rating product without bearing the regulatory burden of becoming a licensed CRA. Cloudflare Workers give global low-latency collection from African central bank APIs, telco/mobile money feeds, and satellite/alternative data; AI agents automate continuous covenant monitoring and anomaly detection; knowledge graphs link entity, sovereign, and counterparty exposures across jurisdictions\u2014a structure the incumbent CRAs, built on legacy SQL pipelines and manual analyst models, cannot replicate cheaply.\n\n### Approach\nTardis should approach the new agency and African sovereign debt offices with a pilot pipeline covering 3-5 pilot sovereigns (Nigeria, Kenya, Ghana, South Africa, Egypt), ingesting public fiscal data, mobile money flows, and FX reserves via Workers, then offer a knowledge graph API the rating agency can query as a 'second opinion' signal layer.\n\n### Revenue Model\nPer-sovereign data infrastructure SaaS fees plus API usage charges from the rating agency, development finance institutions, and African sovereign debt issuers seeking cheaper verification.\n\n### Risks\nThe new agency may lack traction or political backing to dislocate incumbent ratings, leaving Tardis with no anchor tenant for its infrastructure play.\n\n**Source:** [https://businessday.ng/africa/article/africas-new-credit-rating-agency-faces-trust-test-to-cut-borrowing-costs/](https://businessday.ng/africa/article/africas-new-credit-rating-agency-faces-trust-test-to-cut-borrowing-costs/)\n\n---\n\n## 17. California\u2019s Community NEWS Act could be a game changer for local news | Editor and Publisher\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe Community NEWS Act will force tech platforms and AI systems to compensate local news publishers, but there is no infrastructure layer today to identify 'local' sources, track content reuse across AI bots/scrapers, attribute audience value, or distribute micropayments at scale. Local newsrooms also lack tools to prove reach, negotiate collective licensing, or surface their content into AI retrieval pipelines \u2014 leaving them invisible in the new regulatory regime.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for exactly this: Cloudflare Workers can run lightweight content fingerprinting and bot-detection at the edge to log AI scraper traffic against publisher domains; AI agents + knowledge graphs can map local publisher networks, verify community relevance, and power a local-news ontology for licensing negotiations; and real-time data pipelines can settle usage telemetry into auditable revenue-share ledgers \u2014 a capability incumbents like Meta/Google will outsource rather than build themselves.\n\n### Approach\nFirst, stand up a 'Local News Attribution API' on Workers that wraps publisher RSS/sitemaps, logs LLM crawler traffic, and returns compliance-ready usage telemetry \u2014 then pilot it with one California news collective to validate the revenue-share data model before lobbying chambers of commerce in other states.\n\n### Revenue Model\nTransaction fee on attribution-verified micropayments between AI platforms and local publishers, plus SaaS subscriptions from news collectives for analytics, licensing dashboards, and compliance reporting.\n\n### Risks\nThe Act's final scope (tax credit vs. mandatory platform payments vs. AI-specific carve-outs) is still uncertain, so any tooling must be regulation-agnostic or it'll need expensive rework.\n\n**Source:** [https://www.editorandpublisher.com/stories/california-community-news-act-could-be-a-game-changer-for-local-news,263345](https://www.editorandpublisher.com/stories/california-community-news-act-could-be-a-game-changer-for-local-news,263345)\n\n---\n\n## 18. How the Death of an $800 Tariff Loophole Erased 70% of Shein's Value - 24/7 Wall St.\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nThe closure of the de minimis loophole (and similar cross-border trade policy shifts) created an urgent, fragmented intelligence problem: e-commerce, logistics, and sourcing teams now need real-time visibility into tariff schedules, HS code reclassifications, and bilateral trade agreements across dozens of jurisdictions. No incumbent offers a unified, agent-driven monitoring layer that turns regulatory text into actionable supply-chain decisions fast enough to matter.\n\n### Why Tardis Wins\nTardis can deploy Cloudflare Workers at the edge to continuously crawl and parse regulatory feeds (USTR, EU TARIC, India DGFT, CBIC), feed them through AI agents that classify changes by product/HTS code, and resolve everything into a knowledge graph linking products \u2192 HS codes \u2192 tariff rates \u2192 origin countries \u2192 affected entities. This is cheaper, faster, and more globally comprehensive than legacy trade compliance tools like Avalara or CustomsHub, which are heavy, US-centric, and lack the agentic reasoning layer.\n\n### Approach\nFirst, build a minimum viable regulatory intelligence agent on Cloudflare Workers that monitors de minimis threshold changes, new Section 301 exclusions, and key bilateral FTA amendments, alerting subscribers via webhook or Slack. Second, layer a knowledge graph (e.g., on D1 + R2 or Neo4j) that maps a client's SKU catalog to HS codes and simulates tariff impact in real time, exposed through a simple API and dashboard.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$10K/mo) per SKU volume and jurisdiction coverage, plus a premium API for logistics platforms needing programmatic tariff intelligence.\n\n### Risks\nRegulatory monitoring is a thin-margin SaaS category dominated by well-funded incumbents (Avalara, Thomson Reuters ONESOURCE) that already have enterprise data feeds locked in.\n\n**Source:** [https://247wallst.com/investing/2026/09/02/how-the-death-of-an-800-tariff-loophole-erased-70-of-sheins-value/](https://247wallst.com/investing/2026/09/02/how-the-death-of-an-800-tariff-loophole-erased-70-of-sheins-value/)\n\n---\n\n## 19. Microsoft Exchange Exploit Requires No Password: 22,000 Servers Exposed, ESU Ends October\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nOrganizations running self-managed Exchange have an urgent need to identify exposed instances, determine actual compromise, deploy compensating controls, and migrate before Microsoft support ends in October. Existing security products are often expensive, endpoint-centric, or fail to correlate vulnerability exposure with tenant, server, administrator, and mail-flow risk.\n\n### Why Tardis Wins\nTardis can combine Cloudflare Workers-based collectors and alerting with lightweight agents that analyze Exchange, IIS, EDR, and network data, then use AI agents to prioritize remediation and a knowledge graph to map each vulnerable server to business-critical users and dependencies. This can deliver a lower-cost, India-focused managed exposure and migration service without requiring customers to rip and replace their email stack immediately.\n\n### Approach\nLaunch a 48-hour Exchange Exposure Assessment that passively discovers public services and versions, validates patch status and indicators of compromise, and assigns a business-impact score. Convert assessments into a recurring managed-protection subscription while packaging an accelerated Exchange migration or compensating-control deployment service for the October deadline.\n\n### Revenue Model\nCharge a setup fee for each assessment plus recurring per-server monitoring, managed protection, and migration fees.\n\n### Risks\nVulnerability details and internet exposure counts may change rapidly, so Tardis must validate its data sources and clearly distinguish version exposure from confirmed compromise.\n\n**Source:** [https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm](https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm)\n\n---\n\n## 20. Grand Canyon Flood Disrupts $208M Waterline Replacement | Engineering News-Record\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nMajor infrastructure projects remain vulnerable to weather, terrain, access, and cascading construction risks, while monitoring data is fragmented across forecasts, sensors, contractor reports, permits, and public alerts. Owners lack a unified system that detects emerging disruptions early, maps dependencies, and recommends schedule, procurement, and safety responses.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and real-time pipelines to ingest field telemetry, weather feeds, alerts, and project updates at low latency, including from remote locations. AI agents can summarize incidents and propose mitigations, while a knowledge graph connects assets, contractors, supply chains, milestones, and hazards to expose cascading risks that conventional dashboards miss.\n\n### Approach\nBuild a pilot infrastructure-risk intelligence platform using public weather and project data, initially targeting water utilities and civil-engineering contractors. Partner with one project owner to integrate sensor and schedule data, then validate whether alerts reduce downtime, inspection effort, or change-order exposure.\n\n### Revenue Model\nCharge asset owners and engineering firms an annual platform subscription, with usage-based fees for data ingestion, AI analysis, API access, and premium incident-response modules.\n\n### Risks\nThe main challenge is obtaining reliable project and field data while avoiding liability for inaccurate operational or safety recommendations.\n\n**Source:** [https://www.enr.com/articles/63586-grand-canyon-flood-disrupts-208m-waterline-replacement](https://www.enr.com/articles/63586-grand-canyon-flood-disrupts-208m-waterline-replacement)\n\n---\n\n## 21. 'Wake-Up Call': How Lala Shut Down Water Service On Big Island - Honolulu Civil Beat\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nLala\u2019s shutdown of water service on Hawaii\u2019s Big Island exposes how small and geographically dispersed utilities lack resilient power, real-time asset visibility, and reliable public-warning systems during extreme weather. The market gap is an affordable operational-intelligence layer that connects pumps, reservoirs, weather, outages, maintenance records, and resident reports without requiring a costly replacement of legacy infrastructure.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and edge infrastructure to ingest telemetry and keep alerts responsive despite constrained connectivity, while real-time pipelines identify service degradation as it develops. AI agents can summarize incidents and coordinate response workflows, and a knowledge graph can map dependencies among power systems, water assets, roads, crews, communities, and historical failures more effectively than siloed utility dashboards.\n\n### Approach\nBuild a pilot resilience dashboard for one island water provider by combining public weather and outage feeds with utility telemetry, asset records, and automated resident notifications. Start with pump-failure prediction, reservoir-level alerts, dependency mapping, and AI-generated incident briefings, then quantify reductions in outage duration and manual coordination.\n\n### Revenue Model\nCharge utilities and local governments an annual SaaS fee based on monitored assets and service population, with additional implementation, integration, and emergency-response modules.\n\n### Risks\nThe main challenge is securing utility access to inconsistent legacy telemetry and proving sufficient reliability for safety-critical operational decisions.\n\n**Source:** [https://www.civilbeat.org/2026/08/how-hurricane-lala-shut-down-water-service-big-island/](https://www.civilbeat.org/2026/08/how-hurricane-lala-shut-down-water-service-big-island/)\n\n---\n\n## 22. Heat Days Shut Detroit Schools: Crumbling Electrical Infrastructure Stalls $40B AC Fix\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** High\n\n### The Gap\nSchool districts lack a unified, real-time view of whether aging electrical systems can support new air-conditioning equipment, causing closures, failed retrofits, and misallocated capital. The opportunity is an infrastructure-readiness platform that combines facility condition, electrical capacity, weather, outage, maintenance, and funding data to prioritize upgrades before extreme-heat events.\n\n### Why Tardis Wins\nTardis can use Cloudflare Workers and real-time pipelines to ingest sensor feeds, weather alerts, work orders, utility data, and public records at low latency, while AI agents continuously flag risks and draft remediation plans. A knowledge graph connecting schools, equipment, contractors, grants, outages, and dependencies would expose bottlenecks that conventional facilities-management systems and consulting reports miss.\n\n### Approach\nBuild a Detroit-focused pilot using public school-facility records, heat-day history, outage data, capital plans, and available grant information to produce a ranked electrical and cooling readiness map. Validate it with one district, utility, or engineering partner, then package automated risk alerts, retrofit sequencing, and funding-match recommendations as a deployable dashboard.\n\n### Revenue Model\nCharge districts, utilities, engineering firms, and infrastructure financiers annual SaaS fees plus implementation, data-integration, and portfolio-assessment fees.\n\n### Risks\nThe main challenge is obtaining accurate building-level electrical and asset data while navigating slow public-sector procurement and liability concerns around risk recommendations.\n\n**Source:** [https://www.techtimes.com/articles/326152/20260901/heat-days-shut-detroit-schools-crumbling-electrical-infrastructure-stalls-40b-ac-fix.htm](https://www.techtimes.com/articles/326152/20260901/heat-days-shut-detroit-schools-crumbling-electrical-infrastructure-stalls-40b-ac-fix.htm)\n\n---\n\n## 23. Zambia\u2019s carbon registry could mark a turning point for Africa\u2019s carbon market\n\n**Score:** `16/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nAfrica holds massive carbon sequestration potential (forests, soil, renewables) but lacks sovereign, auditable registry infrastructure to monetize it under Article 6 of the Paris Agreement. Incumbents like Verra and Gold Standard are expensive, opaque, and not localized for African nations racing to establish first-mover positions before global compliance markets fully open. Zambia's registry moment signals a continent-wide infrastructure vacuum \u2014 dozens of African nations will need registry, MRV, and market-connectivity layers within 12-24 months.\n\n### Why Tardis Wins\nTardis's stack maps perfectly: Cloudflare Workers deliver low-cost, edge-deployed registry infrastructure that sovereign governments can actually afford and audit; AI agents automate MRV pipelines (satellite imagery ingestion, anomaly detection, verification workflows) replacing expensive manual auditors; D1+R2 handle immutable credit provenance and project documentation; knowledge graphs model the full credit lifecycle from project origination through retirement across jurisdictions. Tardis's emerging-market regulatory tech muscle (India playbooks) translates directly to African sovereign clients who need Western-grade compliance at African budget points.\n\n### Approach\nShip a proof-of-concept sovereign carbon registry on Cloudflare Workers+D1+R2 within 30 days, pre-loaded with Zambia-relevant project schemas and Article 6 transfer rules. Simultaneously open conversations with the Africa Carbon Markets Initiative (ACMI), Zambia's Ministry of Green Economy, and at least one African exchange (e.g., Kenya's Nairobi Securities Exchange carbon platform) as anchor design partners before locking architecture.\n\n### Revenue Model\nPer-tonne registry and MRV transaction fees (e.g., $0.05-0.50/tonne) plus SaaS subscriptions for national registries, with upside on market-connectivity fees as African credits flow into global compliance markets.\n\n### Risks\nSovereign procurement cycles are slow and politically fraught, and Verra/Gold Standard have deep institutional entrenchment that could lock out late entrants via accreditation capture.\n\n**Source:** [https://pro.edgex.exchange/en-US/news/article/zambia-launches-carbon-registry-after-ghanas-lead](https://pro.edgex.exchange/en-US/news/article/zambia-launches-carbon-registry-after-ghanas-lead)\n\n---\n\n## 24. UN charts course to manage global warming-limit breach - The Hindu\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAs the UN formalizes frameworks for managing breached warming limits, a massive compliance and monitoring infrastructure gap emerges. Current climate tracking relies on fragmented, slow legacy systems\u2014country NDCs, corporate ESG disclosures, and IPCC-style reports that are months-to-years stale. No real-time intelligence layer exists to translate new UN/global policy into actionable, auditable compliance signals for governments and corporations, especially across emerging markets like India where data infrastructure is weakest.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers + real-time data pipelines can ingest and normalize emissions, policy, and compliance signals globally at edge speed, replacing the current batch-report paradigm. Knowledge graphs are uniquely suited to model the relational web of commitments \u2192 sector targets \u2192 facility-level progress \u2192 breach implications that AI agents can then monitor continuously. This stack ships far cheaper and faster than incumbent climate-data platforms (Bloomberg ESG, MSCI Carbon, CDP) which are enterprise-priced and retrofitting AI onto monolithic architectures.\n\n### Approach\nStand up a 'Climate Breach Intelligence' MVP on Cloudflare Workers that scrapes UNFCCC/UN policy feeds plus India's CEA, CPCB, and BRSR corporate disclosures into a D1-backed knowledge graph, then deploys an AI agent that alerts subscribers when policy actions materially shift their compliance posture. Pilot with 5-10 Indian corporates in carbon-intensive sectors (steel, cement, power) before expanding to SE Asia.\n\n### Revenue Model\nSaaS subscriptions from corporate sustainability/compliance teams plus tiered API access for consultants, auditors, and investors.\n\n### Risks\nGovernment procurement cycles and access to authoritative emissions data are gatekept by ministries that may resist real-time transparency.\n\n**Source:** [https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece](https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece)\n\n---\n\n## 25. Debian 13 Is Taking Over 2,200+ Control Systems Across CERN\n\n**Score:** `15/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nScientific and industrial facilities running 2,000+ control systems face massive, recurring OS migration pain (CERN's Debian 13 rollout being the latest). There's no purpose-built platform that maps dependencies, validates control logic against new OS versions, and provides unified rollback across heterogeneous SCADA/accelerator/cryogenic stacks \u2014 they're stuck bolting together Ansible, custom scripts, and tribal knowledge. This decay recurs every 2-3 years per facility, with no good solution emerging from incumbents like Red Hat Satellite or Siemens.\n\n### Why Tardis Wins\nTardis can build a control-system lifecycle platform where Cloudflare Workers coordinate distributed rollouts and rollback from the edge, AI agents ingest config drift + CVE feeds + control logic to auto-generate and validate migration playbooks per subsystem, data pipelines stream real-time telemetry from each node for canary validation, and a knowledge graph models the 2,200+ asset dependency tree (e.g., 'if this PLC fails, which detector experiment breaks'). Incumbents optimize for enterprise servers \u2014 Tardis can own the niche where reliability requirements are CERN-grade but tooling is held together with duct tape.\n\n### Approach\nApproach CERN's controls group (IT-CS) and one industrial counterpart (a power utility or water authority mid-migration) as design partners, offering to ingest their asset inventory into a Tardis knowledge graph and run a parallel migration simulation. Package the first successful Debian 13 subsystem cutover as a public case study to seed demand across the ~50 large scientific facilities and several thousand critical-infrastructure operators worldwide.\n\n### Revenue Model\nPer-facility SaaS subscription ($50K-500K/yr depending on control-system count) plus premium AI agent add-ons for predictive migration planning and compliance reporting.\n\n### Risks\nScientific facilities move slowly on procurement, prefer open-source self-hosted solutions, and may view a Cloudflare-native platform as unsuitable for OT/air-gapped environments \u2014 would need an on-prem deployment story.\n\n**Source:** [https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/](https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-03T02:03:09.507434+00:00_", "creation_timestamp": "2026-09-03T02:05:07.417342Z"}, {"uuid": "b960c9e1-798f-4738-bea8-8b504c4295db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mulksgmlqz2a", "content": "Nearly 22,000 Microsoft Exchange servers remain unpatched for CVE-2026-62911, a critical auth bypass that can enable privilege escalation. The US and Germany have the most exposed systems. #MicrosoftExchange #Germany #US", "creation_timestamp": "2026-09-03T04:00:22.342870Z"}, {"uuid": "cb2f4f0c-9f7c-49da-9385-caa01b17624d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/8656a2562be50176eb84c297b76a9fe9", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-03\n\n**Run time:** 2026-09-03T05:04:40.823003+00:00\n**Ideas cleared 15/25:** 25\n\n## 1. African Union launches its own credit ratings agency to challenge global dominance - Africa Business Insight\n\n**Score:** `20/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** High\n\n### The Gap\nThe AU's new ratings agency will need to ingest and normalize fragmented, multilingual financial data across 54 member states \u2014 most of which lacks the standardized public disclosure Western agencies rely on. Existing players (S&P, Moody's, Fitch) apply developed-market models that systematically misprice African sovereign and corporate risk, while real-time alternative data (mobile money flows, commodity movements, political signals) sits unused. Nobody owns the infrastructure layer that turns messy African financial reality into defensible, transparent ratings at scale.\n\n### Why Tardis Wins\nTardis's stack maps almost perfectly: Cloudflare Workers for edge ingestion from dozens of fragmented African exchanges and regulators; R2 for cheap storage of the firehose of filings, news, and alternative data; AI agents to extract structured signals from unstructured, multilingual African sources that incumbents don't even attempt to read; knowledge graphs to model the parent/cross-holding/sovereign-political entity networks that pure financial models miss. We can deliver a fresh, Africa-native methodology in weeks, not the multi-year build an incumbent would need \u2014 and do it at a fraction of their cost basis.\n\n### Approach\nFirst, build a working proof-of-concept that ingests 3-5 pilot African exchanges and central banks via Workers, normalizes filings through LLM extraction agents, and outputs a sample sovereign risk score using a knowledge-graph-backed model \u2014 then pitch it as the infrastructure backbone to the AU initiative, AfDB, or a tier-1 African sovereign (Nigeria, Kenya, South Africa) before they lock in an incumbent partner.\n\n### Revenue Model\nLicense the ratings/analytics platform as infrastructure-as-a-service to the AU agency itself, then layer on subscription APIs for institutional investors, African DFIs, and diaspora bond issuers hungry for non-Western-rated debt.\n\n### Risks\nThe AU could anchor the project to a Big Three incumbent (S&P/Moody's) or a politically-connected African conglomerate, and any ratings output perceived as politically captured will kill the initiative's credibility before it launches.\n\n**Source:** [https://africabusinessinsight.com/african-union-launches-its-own-credit-ratings-agency-to-challenge-global-dominance/](https://africabusinessinsight.com/african-union-launches-its-own-credit-ratings-agency-to-challenge-global-dominance/)\n\n---\n\n## 2. [Gaak Jae-won Column] The Climate Crisis and the Era of the Knowledge-perception Revolution (2): Easing Rules as an Excuse, But Heat Waves Keep Coming\n\n**Score:** `20/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nGovernments are loosening climate/environmental regulations while extreme heat events continue to escalate, creating a critical information asymmetry: businesses, insurers, and municipalities lack real-time, objective intelligence that correlates regulatory easing with actual physical climate risk exposure. The market currently has siloed weather data, lagging regulatory databases, and disconnected health impact studies\u2014no unified intelligence layer bridges policy intent with ground-truth outcomes.\n\n### Why Tardis Wins\nTardis can deploy Cloudflare Workers at the edge to ingest and normalize multi-jurisdictional regulatory feeds, climate sensor data, and health/energy demand signals into a single knowledge graph. AI agents built on this graph can detect 'regulatory arbitrage windows'\u2014flagging when deregulation rhetoric diverges from accelerating physical risk\u2014and push actionable alerts via AI Gateway before heat waves peak, something legacy consulting firms and static ESG databases cannot do in near-real-time.\n\n### Approach\nFirst, build a regulatory-climate divergence dashboard on Cloudflare Workers that scrapes Korean (and APAC) environmental regulatory feeds alongside live meteorological APIs and ER admission data, piping them into a D1-backed knowledge graph. Second, deploy a Tardis AI agent that scores jurisdictions by 'policy-physics gap' and offers subscription alerts to insurers, real estate funds, and HR/safety teams managing outdoor workforces.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$25k/mo) to insurers, infrastructure operators, and enterprise ESG/compliance teams who need forward-looking heat-wave and regulatory-risk intelligence.\n\n### Risks\nLiability exposure if predictive alerts are acted upon and prove wrong, plus political pressure from regulated entities who prefer the current information opacity.\n\n**Source:** [https://www.justeconomix.com/en-us/articles/152640](https://www.justeconomix.com/en-us/articles/152640)\n\n---\n\n## 3. China\u2019s zero tariff is an opportunity Africa must build capacity to use - Businessday NG\n\n**Score:** `19/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nChina's expanded zero-tariff access for African exporters only creates value if African SMEs and trade houses can actually identify eligible products, classify them under HS codes, generate certificates of origin, and match supply to Chinese buyer demand. Today that workflow is fragmented across PDFs from Chinese Customs, Nigerian/Ghanaian/Kenyan trade ministries, and HS code manuals \u2014 most African exporters simply don't know what they can ship duty-free or to whom. The capacity gap is information plumbing, not trade policy.\n\n### Why Tardis Wins\nTardis can build an LLM-powered trade agent that ingests Chinese tariff schedules, AfCFTA rules of origin, and bilateral preferential agreements into a knowledge graph keyed by HS code, then exposes a Cloudflare Worker API that answers 'what can I export from Lagos to Shenzhen duty-free, and who's buying?' in seconds \u2014 a stack incumbents like Avalara or TradeAtlas can't match on price-per-query because they target mid-market compliance teams, not African SMEs paying $20/month.\n\n### Approach\nStand up a data pipeline that scrapes Chinese Customs tariff announcements + AU member export HS-code manifests, build an agent that reasons over eligibility + generates preferential origin documentation, and pilot with one Nigerian trade promotion agency (NEPC or NACCIMA) before the policy window attracts well-funded competitors.\n\n### Revenue Model\nPer-eligibility-query SaaS for African exporters plus transaction fees on matched China-bound shipments, with a public-sector tier for trade ministries who want white-labeled capacity-building dashboards.\n\n### Risks\nChina's tariff preferences are unilateral and reversible, and African adoption of digital trade tools historically stalls on trust, payment rails, and last-mile onboarding \u2014 a great agent nobody uses generates zero revenue.\n\n**Source:** [https://businessday.ng/pro/article/chinas-zero-tariff-is-an-opportunity-africa-must-build-capacity-to-use/](https://businessday.ng/pro/article/chinas-zero-tariff-is-an-opportunity-africa-must-build-capacity-to-use/)\n\n---\n\n## 4. BREAKING: SEC proposes N3 billion minimum capital for forex brokers, N5 billion for trading platforms - Nairametrics\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nNigerian forex brokers and trading platforms now face N3-5 billion minimum capital requirements, creating urgent demand for compliance infrastructure, capital optimization tools, and regulatory reporting systems that most local players lack internally.\n\n### Why Tardis Wins\nTardis's real-time data pipelines and AI agents can automate SEC compliance reporting at a fraction of the cost of building in-house systems, while Cloudflare Workers provides the low-latency infrastructure needed for trading platforms to meet operational requirements efficiently.\n\n### Approach\nPartner with local Nigerian fintech consultancies to offer compliance-as-a-service bundles; deploy pre-built compliance agents and data pipeline templates on Cloudflare that can be white-labeled for brokers.\n\n### Revenue Model\nSaaS subscription for compliance monitoring tools plus implementation fees for custom regulatory infrastructure deployments.\n\n### Risks\nRegulatory uncertainty - the SEC proposal may face pushback or delays, and Nigeria's market size may not justify immediate investment without confirmed enforcement timelines.\n\n**Source:** [https://nairametrics.com/2026/09/02/sec-proposes-n3-billion-minimum-capital-for-forex-brokers-n5-billion-for-trading-platforms/](https://nairametrics.com/2026/09/02/sec-proposes-n3-billion-minimum-capital-for-forex-brokers-n5-billion-for-trading-platforms/)\n\n---\n\n## 5. Isodora opens its compliance platform to Swedish small businesses: from SEK 500 a month instead of half a million in consulting fees - Realtid\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nSmall businesses globally are crushed by mandatory regulatory compliance costs that were designed for enterprises (the SEK 500k vs SEK 500/month gap is universal). Isodora just validated a SaaS model for one country\u2014one vertical\u2014but the underserved SMB compliance market spans every jurisdiction, every sector, and every language. No incumbent is serving this with AI-native, edge-deployed, continuously-updated regulatory intelligence.\n\n### Why Tardis Wins\nTardis's stack maps perfectly: Cloudflare Workers deploy compliance agents globally at near-zero marginal cost (critical when SMBs pay $50/mo, not $50k/yr); AI agents parse and cross-jurisdictionalize regulations in real time; knowledge graphs encode the regulatory web (which law triggers which obligation under which business profile) far better than static rule engines; data pipelines ingest regulator feeds, court rulings, and amendment notices the moment they publish. Isodora likely hard-codes Swedish rules\u2014Tardis can build a graph-based compliance brain that scales to 50 jurisdictions from day one.\n\n### Approach\nPick one high-friction vertical (India GST + labor compliance, or EU GDPR for SaaS startups) and ship an MVP that ingests regulatory sources, builds a knowledge graph of obligations per business profile, and deploys a Cloudflare Worker-backed agent that monitors each SMB's exposure and generates filing-ready outputs. Validate willingness-to-pay with 20 SMBs before expanding.\n\n### Revenue Model\nTiered SaaS subscription ($20\u2013$200/month per SMB) by jurisdiction count and vertical complexity, with premium tiers for AI-agent-driven filing automation and audit trail export.\n\n### Risks\nRegulatory liability is the landmine\u2014wrong compliance advice exposes Tardis to lawsuits and reputational ruin, so legal disclaimers, insurance, and human-in-the-loop review for high-stakes filings are non-negotiable from day one.\n\n**Source:** [https://www.realtid.se/pressmeddelande/isodora-opens-its-compliance-platform-to-swedish-small-businesses-from-sek-500-a-month-instead-of-half-a-million-in-consulting-fees/](https://www.realtid.se/pressmeddelande/isodora-opens-its-compliance-platform-to-swedish-small-businesses-from-sek-500-a-month-instead-of-half-a-million-in-consulting-fees/)\n\n---\n\n## 6. OpenPayd strengthens position in the U.S. market through the acquisition of 43 state licences | Currency News |  Financial and Business News | Markets Insider\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAcquiring 43+ state money transmitter licences is a multi-year, multi-million-dollar barrier that locks out most fintechs from operating across U.S. states. OpenPayd's bet validates that regulatory infrastructure is the moat \u2014 but it also exposes the unsolved upstream pain: there is no real-time, machine-readable intelligence layer that helps firms navigate, monitor, and act on the patchwork of state-by-state payment, licensing, and compliance rules as they evolve.\n\n### Why Tardis Wins\nTardis can build a 'regulatory arbitrage graph' on Cloudflare Workers \u2014 a knowledge graph modeling state/federal licences, capital requirements, permissible activities, and enforcement actions, continuously refreshed by AI-agent scrapers and data pipelines across state banking department feeds, FinCEN, and CFPB sources. Unlike legacy compliance vendors (Thomson Reuters, LexisNexis) that serve static legal lookups, Tardis's agentic stack can deliver proactive delta alerts, license-fit scoring, and automated filing pipelines that turn a 12-month compliance project into a continuous, queryable API.\n\n### Approach\nStand up a Cloudflare Worker orchestration layer that ingests state regulator feeds and NMLS updates into a D1-backed knowledge graph, then deploy AI agents to score licensing pathways for specific business models (MTL, payments, lending, crypto). Package the MVP as a '50-state licence navigator' API priced per jurisdiction-month, targeting cross-border fintechs entering the U.S.\n\n### Revenue Model\nSubscription API priced per jurisdiction and per entity type, plus premium agentic filing/monitoring workflows for fintechs pursuing U.S. licences.\n\n### Risks\nRegulatory data is fragmented, politically sensitive, and accuracy errors in licence guidance carry legal liability that demands strong disclaimers and human-in-the-loop review.\n\n**Source:** [https://markets.businessinsider.com/news/currencies/openpayd-strengthens-position-in-the-u-s-market-through-the-acquisition-of-43-state-licences-1036515026](https://markets.businessinsider.com/news/currencies/openpayd-strengthens-position-in-the-u-s-market-through-the-acquisition-of-43-state-licences-1036515026)\n\n---\n\n## 7. Truth or Consequences Water Crisis Exposes Century-Old Pipes Under\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nMunicipal water utilities across the US operate on infrastructure that is decades to centuries old, with no real-time visibility into pipe condition, failure risk, or asset health. Cities like Truth or Consequences only learn about decay after catastrophic failures, because incumbents rely on manual inspection, fragmented GIS systems, and siloed SCADA data that no one stitches together. There is no affordable, continuously-updating 'infrastructure decay intelligence layer' that municipalities can deploy without ripping out existing systems.\n\n### Why Tardis Wins\nTardis can ingest heterogeneous municipal data sources (SCADA telemetry, work-order history, soil/corrosion records, satellite imagery, weather feeds) via Cloudflare Workers, normalize them into a knowledge graph of pipe assets with condition scores, and run AI agents that predict failure zones weeks in advance. The AI Gateway plus R2 gives a cost structure incumbents like Bentley or ESRI cannot match for small-to-mid cities, and LLM-powered agents can generate plain-English briefings for city managers who aren't GIS experts.\n\n### Approach\nFirst, partner with one mid-size municipality (or a progressive US state DOT/water authority) to ingest their existing asset registry + 2-3 years of break history into a Cloudflare-hosted knowledge graph and ship a failure-prediction dashboard within 6 weeks. Second, use the pilot to productize a turnkey 'Infrastructure Decay Agent' template that other cities self-serve via the AI Gateway.\n\n### Revenue Model\nPer-municipality SaaS subscription tiered by population served, plus usage-based fees on AI Gateway compute for prediction runs and alerting.\n\n### Risks\nMunicipal procurement cycles are slow, risk-averse, and dominated by existing vendor lock-in (ESRI, Bentley, Accela), so landing the first design partner requires either a grant-funded pilot or a champion inside city hall.\n\n**Source:** [https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/](https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/)\n\n---\n\n## 8. Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) - Help Net Security\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\n22,000 unpatched Exchange servers reveal a massive attack-surface-visibility gap: organizations don't know what they own, what's exposed, or what's reachable from the internet. Traditional vulnerability scanners (Qualys, Tenable) are agent-based, slow, and priced for enterprises \u2014 leaving mid-market companies, public sector, and India's SMB/large-enterprise hybrid estates effectively blind between patch cycles.\n\n### Why Tardis Wins\nTardis can run a continuous, passive+active external attack-surface monitor entirely on Cloudflare Workers at the edge \u2014 distributed scanning from 300+ PoPs makes detection faster and harder to block than single-region scanners. AI agents can autonomously triage CVEs against discovered assets, a D1-backed knowledge graph maps server\u2192org\u2192exposure\u2192business-criticality, and the AI Gateway can ingest threat intel (NVD, CISA KEV, Shodan) into real-time R2/D1 pipelines that push alerts within minutes of disclosure \u2014 a 10x cost and latency advantage over legacy enterprise tooling.\n\n### Approach\nShip a focused MVP that (1) ingests active CVEs from NVD/CISA KEV via a Cloudflare Worker cron pipeline, (2) scans a curated set of Indian .in and enterprise domains for the specific exposure pattern, and (3) delivers a paid 'Am I Exposed?' report plus subscription monitoring \u2014 using the India tech-product positioning to wedge in against global incumbents.\n\n### Revenue Model\nTiered SaaS subscription per monitored asset/domain (e.g., \u20b9X/asset/month for continuous monitoring + \u20b9Y for one-shot CVE exposure reports), with premium AI-agent-led remediation playbooks sold to mid-market and enterprise security teams.\n\n### Risks\nScanning third-party infrastructure carries legal and ToS risk (must default to opt-in + authorized scanning only), and free public tools like Shodan/Censys commoditize raw exposure data \u2014 so the moat must come from AI-driven prioritization and remediation guidance, not just detection.\n\n**Source:** [https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/](https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/)\n\n---\n\n## 9. Shipsy Launches \u2018Shipsy Brain\u2019, a Logistics Intelligence Layer for Enterprise | Business News This Week\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nShipsy's 'Brain' signals that logistics intelligence is becoming a mandatory layer, but Shipsy only solves this for its own TMS/WMS customers. The 95% of logistics operators\u2014mid-tier freight forwarders, 3PLs, regional last-mile fleets, bonded warehouses\u2014still run on fragmented ERPs, spreadsheets, and WhatsApp groups with zero predictive intelligence or autonomous exception handling.\n\n### Why Tardis Wins\nTardis can ship a horizontal 'intelligence layer' deployable as a Cloudflare Worker at any logistics node\u2014ingesting events from any TMS/ERP via webhook, building a supply-chain knowledge graph on D1/R2, and running agentic decision loops (rerouting, ETA recomputation, customs risk) at edge latency. This sidesteps Shipsy's lock-in by being bolt-on, and the edge architecture collapses the per-shipment inference cost that makes enterprise AI layers unaffordable for mid-market operators.\n\n### Approach\nFirst, prototype a knowledge-graph schema for a single vertical (e.g., Indian EXIM container movement) and wire it to one free-tier freight forwarder's data feed via Cloudflare Workers + AI Gateway. Validate the 'exception prediction \u2192 agent action' loop with 2-3 design partners before building the multi-vertical product.\n\n### Revenue Model\nUsage-based pricing per shipment/TEU processed through the intelligence layer, plus a margin share on autonomous actions taken (e.g., 2% of recovered demurrage charges).\n\n### Risks\nShipsy and incumbents (FourKites, project44) have entrenched customer data and integration moats; winning requires being 10x cheaper and embeddable, not feature-complete.\n\n**Source:** [https://businessnewsthisweek.com/business/shipsy-launches-shipsy-brain-a-logistics-intelligence-layer-for-enterprise/](https://businessnewsthisweek.com/business/shipsy-launches-shipsy-brain-a-logistics-intelligence-layer-for-enterprise/)\n\n---\n\n## 10. CJ Logistics America Chooses OneTrack's AiOn to Deploy Agentic AI Across 40+ Warehouses | The AI Journal\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnterprise logistics AI deployments like OneTrack's AiOn are monolithic, vendor-locked platforms that take quarters to roll out across warehouse networks. Mid-market and regional logistics operators lack access to modular, edge-deployable agentic AI that can integrate with existing WMS/WCS without rip-and-replace. The market needs composable AI orchestration that plugs into heterogeneous warehouse tech stacks rather than imposing a single vision stack.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers architecture is ideal for edge-deployed AI agents that process vision and sensor data locally at each warehouse, keeping latency low and bandwidth costs minimal. An agent orchestration layer on Workers + R2 can serve as a vendor-neutral middleware\u2014routing inferences through AI Gateway, persisting operational knowledge in a knowledge graph, and giving each warehouse a lightweight, independently updatable agent fleet instead of a centralized monolith.\n\n### Approach\nBuild a reference architecture on Cloudflare Workers demonstrating a multi-agent warehouse AI (forklift detection, dock-door monitoring, inventory anomaly flagging) deployable per-warehouse via Wrangler in under an hour. Then approach 3-5 mid-market 3PLs and regional distributors as design partners to validate against real WMS integrations before engaging larger players.\n\n### Revenue Model\nPer-warehouse monthly SaaS fee for the agent orchestration layer, plus usage-based inference billing through Cloudflare AI Gateway margins.\n\n### Risks\nVision-AI incumbents like OneTrack have proprietary datasets and signed enterprise contracts that create switching costs; Tardis must win on integration speed and cost-per-warehouse, not accuracy parity.\n\n**Source:** [https://aijourn.com/cj-logistics-america-chooses-onetracks-aion-to-deploy-agentic-ai-across-40-warehouses/](https://aijourn.com/cj-logistics-america-chooses-onetracks-aion-to-deploy-agentic-ai-across-40-warehouses/)\n\n---\n\n## 11. Analysis-Emerging markets march out of \u2018valley of tears\u2019 as investors diversify \u2013 Regional Media News\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAs investors diversify out of concentrated US tech exposure into emerging markets, there is no real-time, structured intelligence layer that synthesizes cross-regional signals (capital flows, sentiment, policy shifts, sector rotation) at sub-second latency. Retail and emerging fund managers still rely on either $30K/year Bloomberg terminals or noisy, untranslated regional news feeds \u2014 the mid-market is structurally underserved.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers + R2 + D1 stack can ingest and normalize dozens of multilingual regional sources at edge speed for near-zero compute cost, while orchestration agents run sentiment extraction, entity resolution, and cross-market correlation in parallel. The knowledge graph layer maps issuer\u2192sector\u2192macro-policy\u2192capital-flow relationships that incumbents charge enterprise prices for, and Workers AI keeps the marginal analysis cost fractions of a cent per signal.\n\n### Approach\nStand up a 'Emerging Markets Pulse' pipeline: (1) wire 15-20 priority regional sources through a Worker-based ingestion layer with D1 for metadata and R2 for raw archives, (2) deploy an agent that runs daily entity/sentiment extraction and pushes results into a knowledge graph exposed via a queryable API.\n\n### Revenue Model\nTiered SaaS subscription ($99/mo pro, $999/mo desk) plus API access for fintech platforms embedding emerging-market signals.\n\n### Risks\nData licensing and per-jurisdiction redistribution rights for financial content can block commercialization and force reliance on scrapeable but legally gray sources.\n\n**Source:** [https://www.regionalmedianews.com/news/national/business/analysis-emerging-markets-march-out-of-valley-of-tears-as-investors-diversify/](https://www.regionalmedianews.com/news/national/business/analysis-emerging-markets-march-out-of-valley-of-tears-as-investors-diversify/)\n\n---\n\n## 12. IMF's Georgieva says rising bond yields threaten progress on developing country debt - BusinessWorld Online\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nRising bond yields are exposing developing countries to sudden debt distress, but most sovereign risk intelligence sits behind expensive institutional terminals (Bloomberg, Refinitiv) or arrives as fragmented news. There is no affordable, real-time, AI-curated early-warning layer that fuses yield movements, IMF/credit-rating signals, and country-specific debt profiles into actionable briefs for emerging market lenders, DFIs, fintech platforms, and diaspora-bond issuers.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers stack enables global edge ingestion of yield curves and policy feeds at near-zero marginal cost, while AI agents can continuously synthesize IMF statements, central bank actions, and debt-service schedules into a knowledge graph that maps causation across 50+ EM sovereigns \u2014 a depth and freshness no incumbent terminal replicates. The India-first focus provides a calibrated anchor (G-Sec yields, RBI policy, INR debt) that generalist tools lack, and the orchestration layer can ship deliverables (daily briefs, API signals, WhatsApp alerts) tailored to fintech NBFCs and DFI analysts who can't afford Bloomberg.\n\n### Approach\nStand up a minimal viable 'EM Debt Early Warning' pipeline on Cloudflare Workers + R2 that ingests 10-year bond yields for ~30 key developing sovereigns, scrapes IMF/Moody's/S&P headlines, and uses an AI agent to generate a daily ranked-risk brief stored in a knowledge graph. Pilot with 3-5 design partners \u2014 an Indian fintech lender, a diaspora bond platform, and a DFI analyst desk \u2014 before broadening.\n\n### Revenue Model\nTiered SaaS subscriptions (analyst dashboard + alerts) plus per-seat API pricing for programmatic access by lending platforms and DFI risk teams.\n\n### Risks\nAcquisition risk: institutional sovereign-debt desks are sticky on Bloomberg/Refinitiv, so growth depends on winning next-wave fintech lenders, DFIs, and diaspora-bond platforms who are currently underserved.\n\n**Source:** [https://bworldonline.com/world/2026/09/03/774362/imfs-georgieva-says-rising-bond-yields-threaten-progress-on-developing-country-debt/](https://bworldonline.com/world/2026/09/03/774362/imfs-georgieva-says-rising-bond-yields-threaten-progress-on-developing-country-debt/)\n\n---\n\n## 13. Africa\u2019s new credit rating agency faces trust test to cut borrowing costs - Businessday NG\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAfrica's new rating agency needs to overcome a credibility deficit against the Big Three (Moody's, S&P, Fitch), who are widely accused of systematically overrating African sovereign risk and inflating borrowing costs. The core gap is data infrastructure\u2014African sovereign, sub-sovereign, and corporate credit signals are fragmented across central banks, mobile money operators, satellite feeds, and informal markets, with no unified real-time layer to underwrite alternative ratings at scale.\n\n### Why Tardis Wins\nTardis can build the data ingestion and analysis layer beneath the rating product without bearing the regulatory burden of becoming a licensed CRA. Cloudflare Workers give global low-latency collection from African central bank APIs, telco/mobile money feeds, and satellite/alternative data; AI agents automate continuous covenant monitoring and anomaly detection; knowledge graphs link entity, sovereign, and counterparty exposures across jurisdictions\u2014a structure the incumbent CRAs, built on legacy SQL pipelines and manual analyst models, cannot replicate cheaply.\n\n### Approach\nTardis should approach the new agency and African sovereign debt offices with a pilot pipeline covering 3-5 pilot sovereigns (Nigeria, Kenya, Ghana, South Africa, Egypt), ingesting public fiscal data, mobile money flows, and FX reserves via Workers, then offer a knowledge graph API the rating agency can query as a 'second opinion' signal layer.\n\n### Revenue Model\nPer-sovereign data infrastructure SaaS fees plus API usage charges from the rating agency, development finance institutions, and African sovereign debt issuers seeking cheaper verification.\n\n### Risks\nThe new agency may lack traction or political backing to dislocate incumbent ratings, leaving Tardis with no anchor tenant for its infrastructure play.\n\n**Source:** [https://businessday.ng/africa/article/africas-new-credit-rating-agency-faces-trust-test-to-cut-borrowing-costs/](https://businessday.ng/africa/article/africas-new-credit-rating-agency-faces-trust-test-to-cut-borrowing-costs/)\n\n---\n\n## 14. California\u2019s Community NEWS Act could be a game changer for local news | Editor and Publisher\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe Community NEWS Act will force tech platforms and AI systems to compensate local news publishers, but there is no infrastructure layer today to identify 'local' sources, track content reuse across AI bots/scrapers, attribute audience value, or distribute micropayments at scale. Local newsrooms also lack tools to prove reach, negotiate collective licensing, or surface their content into AI retrieval pipelines \u2014 leaving them invisible in the new regulatory regime.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for exactly this: Cloudflare Workers can run lightweight content fingerprinting and bot-detection at the edge to log AI scraper traffic against publisher domains; AI agents + knowledge graphs can map local publisher networks, verify community relevance, and power a local-news ontology for licensing negotiations; and real-time data pipelines can settle usage telemetry into auditable revenue-share ledgers \u2014 a capability incumbents like Meta/Google will outsource rather than build themselves.\n\n### Approach\nFirst, stand up a 'Local News Attribution API' on Workers that wraps publisher RSS/sitemaps, logs LLM crawler traffic, and returns compliance-ready usage telemetry \u2014 then pilot it with one California news collective to validate the revenue-share data model before lobbying chambers of commerce in other states.\n\n### Revenue Model\nTransaction fee on attribution-verified micropayments between AI platforms and local publishers, plus SaaS subscriptions from news collectives for analytics, licensing dashboards, and compliance reporting.\n\n### Risks\nThe Act's final scope (tax credit vs. mandatory platform payments vs. AI-specific carve-outs) is still uncertain, so any tooling must be regulation-agnostic or it'll need expensive rework.\n\n**Source:** [https://www.editorandpublisher.com/stories/california-community-news-act-could-be-a-game-changer-for-local-news,263345](https://www.editorandpublisher.com/stories/california-community-news-act-could-be-a-game-changer-for-local-news,263345)\n\n---\n\n## 15. How the Death of an $800 Tariff Loophole Erased 70% of Shein's Value - 24/7 Wall St.\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nThe closure of the de minimis loophole (and similar cross-border trade policy shifts) created an urgent, fragmented intelligence problem: e-commerce, logistics, and sourcing teams now need real-time visibility into tariff schedules, HS code reclassifications, and bilateral trade agreements across dozens of jurisdictions. No incumbent offers a unified, agent-driven monitoring layer that turns regulatory text into actionable supply-chain decisions fast enough to matter.\n\n### Why Tardis Wins\nTardis can deploy Cloudflare Workers at the edge to continuously crawl and parse regulatory feeds (USTR, EU TARIC, India DGFT, CBIC), feed them through AI agents that classify changes by product/HTS code, and resolve everything into a knowledge graph linking products \u2192 HS codes \u2192 tariff rates \u2192 origin countries \u2192 affected entities. This is cheaper, faster, and more globally comprehensive than legacy trade compliance tools like Avalara or CustomsHub, which are heavy, US-centric, and lack the agentic reasoning layer.\n\n### Approach\nFirst, build a minimum viable regulatory intelligence agent on Cloudflare Workers that monitors de minimis threshold changes, new Section 301 exclusions, and key bilateral FTA amendments, alerting subscribers via webhook or Slack. Second, layer a knowledge graph (e.g., on D1 + R2 or Neo4j) that maps a client's SKU catalog to HS codes and simulates tariff impact in real time, exposed through a simple API and dashboard.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$10K/mo) per SKU volume and jurisdiction coverage, plus a premium API for logistics platforms needing programmatic tariff intelligence.\n\n### Risks\nRegulatory monitoring is a thin-margin SaaS category dominated by well-funded incumbents (Avalara, Thomson Reuters ONESOURCE) that already have enterprise data feeds locked in.\n\n**Source:** [https://247wallst.com/investing/2026/09/02/how-the-death-of-an-800-tariff-loophole-erased-70-of-sheins-value/](https://247wallst.com/investing/2026/09/02/how-the-death-of-an-800-tariff-loophole-erased-70-of-sheins-value/)\n\n---\n\n## 16. Microsoft Exchange Exploit Requires No Password: 22,000 Servers Exposed, ESU Ends October\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nOrganizations running self-managed Exchange have an urgent need to identify exposed instances, determine actual compromise, deploy compensating controls, and migrate before Microsoft support ends in October. Existing security products are often expensive, endpoint-centric, or fail to correlate vulnerability exposure with tenant, server, administrator, and mail-flow risk.\n\n### Why Tardis Wins\nTardis can combine Cloudflare Workers-based collectors and alerting with lightweight agents that analyze Exchange, IIS, EDR, and network data, then use AI agents to prioritize remediation and a knowledge graph to map each vulnerable server to business-critical users and dependencies. This can deliver a lower-cost, India-focused managed exposure and migration service without requiring customers to rip and replace their email stack immediately.\n\n### Approach\nLaunch a 48-hour Exchange Exposure Assessment that passively discovers public services and versions, validates patch status and indicators of compromise, and assigns a business-impact score. Convert assessments into a recurring managed-protection subscription while packaging an accelerated Exchange migration or compensating-control deployment service for the October deadline.\n\n### Revenue Model\nCharge a setup fee for each assessment plus recurring per-server monitoring, managed protection, and migration fees.\n\n### Risks\nVulnerability details and internet exposure counts may change rapidly, so Tardis must validate its data sources and clearly distinguish version exposure from confirmed compromise.\n\n**Source:** [https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm](https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm)\n\n---\n\n## 17. Korea Becomes First to Send 11.5-Tonne Autonomous Trucks Through Signalized City Traffic\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAutonomous trucking is advancing rapidly in hardware and driving AI, but the orchestration layer is underserved: real-time V2X data pipelines, multi-jurisdiction regulatory knowledge, fleet coordination, and edge inference for 11.5-tonne vehicles interacting with city infrastructure. Incumbents like TuSimple and Aurora build vertically; nobody owns the neutral data-and-intelligence substrate that lets multiple fleets, cities, and signal systems interoperate.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this: Cloudflare Workers give sub-50ms edge inference for V2X signal negotiation without round-tripping to a central cloud, R2 cheaply archives the petabytes of sensor/ video telemetry per truck per day, D1 + knowledge graphs encode traffic rules and signal phase data across jurisdictions, and AI agents orchestrate fleet routing and exception handling. This is a globally distributed, latency-sensitive, data-heavy problem \u2014 exactly what the Tardis stack is optimized for versus centralized hyperscaler stacks.\n\n### Approach\nFirst, build a knowledge graph of signalized intersection APIs and AV-trucking regulations across 10 priority corridors (Korea, US, Japan, India freight corridors) and expose it as a Workers-based API. Second, pilot the edge V2X inference and telemetry pipeline with one Korean autonomous freight partner or municipal transport authority to anchor the reference deployment before the market consolidates around a vertical incumbent.\n\n### Revenue Model\nPer-truck monthly SaaS for the orchestration/edge intelligence layer, plus usage-based fees for V2X signal API calls and R2-stored telemetry retrieval.\n\n### Risks\nVertically integrated AV-trucking players (Aurora, Plus, Waabi) may build proprietary equivalents and lock fleets in before a neutral layer gains adoption.\n\n**Source:** [https://www.techtimes.com/articles/323275/20260806/korea-becomes-first-send-115-tonne-autonomous-trucks-through-signalized-city-traffic.htm](https://www.techtimes.com/articles/323275/20260806/korea-becomes-first-send-115-tonne-autonomous-trucks-through-signalized-city-traffic.htm)\n\n---\n\n## 18. FedEx and Dexterity Expand Physical AI Deployment for Autonomous Trailer Loading at Hagerstown Hub\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDexterity and FedEx are solving the physical manipulation layer (robots loading trailers), but the orchestration, exception handling, and intelligence layer above the robots is wide open. Each hub generates high-velocity sensor and event streams that today are siloed in proprietary robot controllers \u2014 there's no fleet-level knowledge graph linking trailer types, SKU profiles, dock schedules, and throughput anomalies into something a logistics operator can actually act on.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this edge-to-aggregation pattern: Cloudflare Workers ingest robot telemetry and dock sensor events at the edge, R2 stores the raw streams cheaply, D1 + a knowledge graph model the facility/dock/SKU/trailer relationships, and AI agents run exception playbooks (e.g., 're-routing this misaligned tote to bay 4'). Versus incumbents like Palantir or Snowflake, Tardis can deliver this at per-hub economics that make sense for mid-market 3PLs and India-based shippers, not just FedEx-scale players.\n\n### Approach\nFirst, prototype an event-ingestion + anomaly-detection layer on Cloudflare Workers using publicly-available FedEx hub throughput data and Dexterity case study metrics to demonstrate ROI. Second, partner with one India-based 3PL or cold-chain operator (Delhivery, Snowman, ColdEx) to pilot the orchestration layer alongside their existing manual or semi-automated dock operations.\n\n### Revenue Model\nPer-hub / per-dock SaaS subscription for the orchestration and analytics layer, with usage-based fees on events processed through the edge pipeline.\n\n### Risks\nDexterity and competitors (Symbotic, Berkshire Grey) are likely building proprietary orchestration stacks vertically, and winning a wedge requires displacing or integrating past their data moats.\n\n**Source:** [https://theaiinsider.tech/2026/08/31/fedex-and-dexterity-expand-physical-ai-deployment-for-autonomous-trailer-loading-at-hagerstown-hub/](https://theaiinsider.tech/2026/08/31/fedex-and-dexterity-expand-physical-ai-deployment-for-autonomous-trailer-loading-at-hagerstown-hub/)\n\n---\n\n## 19. The Collab Economy: Why Every Brand Suddenly Wants to Wear Another Brand\u2019s Logo | BBF Digital\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nBrands lack a real-time system to discover, evaluate, and execute culturally relevant logo and product collaborations before trends peak. Existing tools provide scattered social listening, weak partner-fit analysis, and little automated handling of audience overlap, brand safety, or campaign measurement.\n\n### Why Tardis Wins\nTardis can combine Cloudflare Workers for high-volume ingestion and campaign APIs, durable data pipelines for market signals, AI agents for partner discovery and risk analysis, and knowledge graphs for modeling brand identity, audiences, categories, and past collaborations. This creates a continuously updated collaboration graph and decision engine that is more current, explainable, and actionable than generic trend dashboards or agency intuition.\n\n### Approach\nBuild a focused MVP that ingests social, search, commerce, cultural, and trademark signals; scores potential brand-pairings; and generates briefs with audience overlap, novelty, brand-safety risks, estimated demand, and a monitoring plan. Pilot it with India-focused D2C, fashion, entertainment, and consumer-tech brands, then add campaign tracking and managed partnership introductions as usage proves demand.\n\n### Revenue Model\nCharge brands a recurring intelligence-platform subscription, with higher-tier market-graph access, API integration, and paid managed partner-discovery services.\n\n### Risks\nTrend signals can be noisy, short-lived, or culturally misinterpreted, so inaccurate recommendations or a backlash against a mismatched collaboration could quickly damage brand trust.\n\n**Source:** [https://bbf.digital/the-collab-economy-why-every-brand-suddenly-wants-to-wear-another-brands-logo](https://bbf.digital/the-collab-economy-why-every-brand-suddenly-wants-to-wear-another-brands-logo)\n\n---\n\n## 20. Flexport\u2019s Alleged Last-Mile Spinoff Is Rattling 3PL Insiders \u2013 Online Store News\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nWhen a freight-forwarding giant like Flexport carves out its last-mile arm, downstream 3PLs and DTC merchants face immediate rate-card, SLA, and capacity uncertainty \u2014 and the existing tooling (ShipStation, ShipBob, legacy TMS) gives them no unified, real-time view across competing last-mile carriers. The broken piece is decision intelligence: merchants are still picking carriers on stale rate sheets and gut feel rather than continuous, multi-carrier optimization.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this \u2014 Cloudflare Workers + D1 + R2 can ingest carrier APIs, tracking webhooks, and rate feeds at the edge in real time, while AI agents (orchestrated via the AI Gateway) continuously shop rates, predict exceptions, and re-route. A knowledge graph of carrier-zones-SLAs-SKUs lets the agent reason about trade-offs (cost vs. transit time vs. failure rate) the way a senior logistics analyst would, but at a per-shipment cost incumbents can't match.\n\n### Approach\nFirst, stand up an agent that scrapes and structures 3PL market signals (news, carrier announcements, rate changes) into the knowledge graph so Tardis sees the Flexport-shaped hole before competitors do. Second, prototype a 'last-mile router' agent for 2-3 design partners \u2014 a Shopify or Meesho merchant plus a mid-market 3PL \u2014 that ingests their order stream and outputs a carrier recommendation per shipment with a clear cost/SLA delta.\n\n### Revenue Model\nPer-shipment optimization fee (sub-cent, processed at the edge) plus a SaaS tier for the market-intelligence dashboard and knowledge-graph API.\n\n### Risks\nLogistics is a thin-margin, relationship-driven business where switching costs are high and regional last-mile carriers dominate, so trust-building and carrier-API access will be the bottleneck, not the technology.\n\n**Source:** [https://onlinestorenews.com/flexports-alleged-last-mile-spinoff-is-rattling-3pl-insiders/](https://onlinestorenews.com/flexports-alleged-last-mile-spinoff-is-rattling-3pl-insiders/)\n\n---\n\n## 21. Flexport\u2019s Alleged Warehouse Network Grab Is Rattling 3PL Operators \u2013 Ecommerce Times\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFlexport's vertical expansion into owned warehouse infrastructure is creating an existential threat to independent 3PL operators, but the industry lacks a neutral, real-time intelligence layer that lets 3PLs discover alternative warehousing capacity, benchmark Flexport's pricing pressure, and coordinate responses. Small and mid-market 3PLs are flying blind on Flexport's footprint expansion, contract terms offered to their shipper clients, and which warehouse partners are quietly being acquired or locked up.\n\n### Why Tardis Wins\nTardis can build the 'S&P Global for warehouse intelligence' \u2014 using Cloudflare Workers for a globally distributed scraping/API aggregation layer, real-time data pipelines ingesting carrier filings, SEC data, and warehouse listings, a knowledge graph modeling relationships between Flexport, acquired operators, and remaining independents, and AI agents that autonomously monitor Flexport's moves and generate weekly threat briefings for 3PL customers. Unlike legacy logistics data vendors (Descartes, project44) built on monolithic stacks, Tardis's edge-native architecture delivers sub-second queries on warehouse metadata at a fraction of the cost.\n\n### Approach\nShip a '3PL Defense Dashboard' MVP within 6 weeks: ingest public warehouse listings, DOT filings, and Flexport's announced acquisitions into a D1-backed warehouse graph, expose it via a Workers API with an AI Gateway-powered natural-language query layer, and recruit 5 design-partner 3PLs to validate willingness-to-pay before scaling.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$5K/mo) per 3PL for warehouse intelligence dashboards plus a transaction fee on any re-routed freight that moves through the Tardis-matched alternative warehouse network.\n\n### Risks\nFlexport and incumbent logistics data vendors (project44, FourKites) have deep shipper relationships and could either acquire competing intelligence players or lock down warehouse data sources first.\n\n**Source:** [https://ecommerce-times.com/flexports-alleged-warehouse-network-grab-is-rattling-3pl-operators/](https://ecommerce-times.com/flexports-alleged-warehouse-network-grab-is-rattling-3pl-operators/)\n\n---\n\n## 22. Zambia\u2019s carbon registry could mark a turning point for Africa\u2019s carbon market\n\n**Score:** `16/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nAfrica holds massive carbon sequestration potential (forests, soil, renewables) but lacks sovereign, auditable registry infrastructure to monetize it under Article 6 of the Paris Agreement. Incumbents like Verra and Gold Standard are expensive, opaque, and not localized for African nations racing to establish first-mover positions before global compliance markets fully open. Zambia's registry moment signals a continent-wide infrastructure vacuum \u2014 dozens of African nations will need registry, MRV, and market-connectivity layers within 12-24 months.\n\n### Why Tardis Wins\nTardis's stack maps perfectly: Cloudflare Workers deliver low-cost, edge-deployed registry infrastructure that sovereign governments can actually afford and audit; AI agents automate MRV pipelines (satellite imagery ingestion, anomaly detection, verification workflows) replacing expensive manual auditors; D1+R2 handle immutable credit provenance and project documentation; knowledge graphs model the full credit lifecycle from project origination through retirement across jurisdictions. Tardis's emerging-market regulatory tech muscle (India playbooks) translates directly to African sovereign clients who need Western-grade compliance at African budget points.\n\n### Approach\nShip a proof-of-concept sovereign carbon registry on Cloudflare Workers+D1+R2 within 30 days, pre-loaded with Zambia-relevant project schemas and Article 6 transfer rules. Simultaneously open conversations with the Africa Carbon Markets Initiative (ACMI), Zambia's Ministry of Green Economy, and at least one African exchange (e.g., Kenya's Nairobi Securities Exchange carbon platform) as anchor design partners before locking architecture.\n\n### Revenue Model\nPer-tonne registry and MRV transaction fees (e.g., $0.05-0.50/tonne) plus SaaS subscriptions for national registries, with upside on market-connectivity fees as African credits flow into global compliance markets.\n\n### Risks\nSovereign procurement cycles are slow and politically fraught, and Verra/Gold Standard have deep institutional entrenchment that could lock out late entrants via accreditation capture.\n\n**Source:** [https://pro.edgex.exchange/en-US/news/article/zambia-launches-carbon-registry-after-ghanas-lead](https://pro.edgex.exchange/en-US/news/article/zambia-launches-carbon-registry-after-ghanas-lead)\n\n---\n\n## 23. UN charts course to manage global warming-limit breach - The Hindu\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAs the UN formalizes frameworks for managing breached warming limits, a massive compliance and monitoring infrastructure gap emerges. Current climate tracking relies on fragmented, slow legacy systems\u2014country NDCs, corporate ESG disclosures, and IPCC-style reports that are months-to-years stale. No real-time intelligence layer exists to translate new UN/global policy into actionable, auditable compliance signals for governments and corporations, especially across emerging markets like India where data infrastructure is weakest.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers + real-time data pipelines can ingest and normalize emissions, policy, and compliance signals globally at edge speed, replacing the current batch-report paradigm. Knowledge graphs are uniquely suited to model the relational web of commitments \u2192 sector targets \u2192 facility-level progress \u2192 breach implications that AI agents can then monitor continuously. This stack ships far cheaper and faster than incumbent climate-data platforms (Bloomberg ESG, MSCI Carbon, CDP) which are enterprise-priced and retrofitting AI onto monolithic architectures.\n\n### Approach\nStand up a 'Climate Breach Intelligence' MVP on Cloudflare Workers that scrapes UNFCCC/UN policy feeds plus India's CEA, CPCB, and BRSR corporate disclosures into a D1-backed knowledge graph, then deploys an AI agent that alerts subscribers when policy actions materially shift their compliance posture. Pilot with 5-10 Indian corporates in carbon-intensive sectors (steel, cement, power) before expanding to SE Asia.\n\n### Revenue Model\nSaaS subscriptions from corporate sustainability/compliance teams plus tiered API access for consultants, auditors, and investors.\n\n### Risks\nGovernment procurement cycles and access to authoritative emissions data are gatekept by ministries that may resist real-time transparency.\n\n**Source:** [https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece](https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece)\n\n---\n\n## 24. Logistics Tech 2026: Warehouse Robots, Drones & AI - INT News\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe logistics robotics boom is hardware-rich but orchestration-poor \u2014 companies like Amazon Robotics, Symbotic, and Locus dominate warehouses but leave mid-market and emerging-market operators (especially India) without affordable, interoperable intelligence layers to coordinate heterogeneous robot/drone/human fleets in real time. The real opportunity sits in the coordination software, not the bots themselves, which most Indian 3PLs, dark stores, and D2C fulfillment centers desperately need but can't afford from Western vendors.\n\n### Why Tardis Wins\nTardis's stack maps almost 1:1 to this problem: Cloudflare Workers + Durable Objects give sub-millisecond global edge orchestration ideal for fleet coordination, AI agents can run adaptive task allocation across robots and humans, and knowledge graphs can model warehouse topology, SKU velocity, and drone flight corridors. Compared to incumbents who ship heavy on-prem WMS stacks requiring six-month deployments, Tardis can offer a lightweight, API-first, pay-per-robot SaaS layer that slots on top of any hardware \u2014 a wedge Walmart-Amazon-tier players won't bother building for mid-market.\n\n### Approach\nBuild a Fleet Orchestration MVP targeting Indian quick-commerce dark stores (Zepto, Blinkit, Swiggy Instamart suppliers) \u2014 an AI agent layer that ingests telemetry from existing AMRs, schedules drone inventory sweeps, and optimizes picker routing via Workers + a knowledge graph of warehouse state. Land one paying pilot in 60 days, then expand horizontally to UAE/Saudi logistics free zones.\n\n### Revenue Model\nPer-robot or per-warehouse monthly SaaS fee for the orchestration/AI intelligence layer, plus usage-based pricing for AI inference and data pipeline throughput via Cloudflare AI Gateway.\n\n### Risks\nHardware integration complexity and incumbent free bundling (Amazon/Symbotic offering 'free' orchestration for their own bots) could squeeze standalone software plays.\n\n**Source:** [https://intnews.it/en/logistics-tech-2026-warehouse-robots-drones-ai/](https://intnews.it/en/logistics-tech-2026-warehouse-robots-drones-ai/)\n\n---\n\n## 25. Debian 13 Is Taking Over 2,200+ Control Systems Across CERN\n\n**Score:** `15/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nScientific and industrial facilities running 2,000+ control systems face massive, recurring OS migration pain (CERN's Debian 13 rollout being the latest). There's no purpose-built platform that maps dependencies, validates control logic against new OS versions, and provides unified rollback across heterogeneous SCADA/accelerator/cryogenic stacks \u2014 they're stuck bolting together Ansible, custom scripts, and tribal knowledge. This decay recurs every 2-3 years per facility, with no good solution emerging from incumbents like Red Hat Satellite or Siemens.\n\n### Why Tardis Wins\nTardis can build a control-system lifecycle platform where Cloudflare Workers coordinate distributed rollouts and rollback from the edge, AI agents ingest config drift + CVE feeds + control logic to auto-generate and validate migration playbooks per subsystem, data pipelines stream real-time telemetry from each node for canary validation, and a knowledge graph models the 2,200+ asset dependency tree (e.g., 'if this PLC fails, which detector experiment breaks'). Incumbents optimize for enterprise servers \u2014 Tardis can own the niche where reliability requirements are CERN-grade but tooling is held together with duct tape.\n\n### Approach\nApproach CERN's controls group (IT-CS) and one industrial counterpart (a power utility or water authority mid-migration) as design partners, offering to ingest their asset inventory into a Tardis knowledge graph and run a parallel migration simulation. Package the first successful Debian 13 subsystem cutover as a public case study to seed demand across the ~50 large scientific facilities and several thousand critical-infrastructure operators worldwide.\n\n### Revenue Model\nPer-facility SaaS subscription ($50K-500K/yr depending on control-system count) plus premium AI agent add-ons for predictive migration planning and compliance reporting.\n\n### Risks\nScientific facilities move slowly on procurement, prefer open-source self-hosted solutions, and may view a Cloudflare-native platform as unsuitable for OT/air-gapped environments \u2014 would need an on-prem deployment story.\n\n**Source:** [https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/](https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-03T05:04:40.823112+00:00_", "creation_timestamp": "2026-09-03T05:06:01.895429Z"}, {"uuid": "cecb1e1d-e628-4ccb-badb-7487ea8f1bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mulydcl3r32f", "content": "Nearly 22,000 internet-facing Exchange servers remain unpatched against CVE-2026-62911, an authentication bypass that can hijack every user's mailbox.\n\n#CVE202662911 #MicrosoftExchange #AuthenticationBypass #Shadowserver #Patch", "creation_timestamp": "2026-09-03T08:02:26.887496Z"}, {"uuid": "7ce09b08-f00f-46a9-90c9-f899b5ae0cdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62676", "type": "seen", "source": "https://gist.github.com/alon710/43bf5918e3d482ece766ad1a3e45b23b", "content": "# CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62676\n\n## Summary\nA high-severity security guardrail policy bypass vulnerability was identified in the Omnigent AI agent framework. The shell-command parser failed to correctly identify gated commands wrapped in certain command modifiers, combined interpreter flags, or command substitutions. Consequently, the default fail-open behavior allowed arbitrary execution of restricted operations.\n\n## TL;DR\nFlaws in Omnigent's shell-command parser allow command wrappers, interactive flags, or command substitutions to bypass security guardrails and run forbidden operations due to a fail-open default.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-184\n- **Attack Vector**: Network\n- **CVSS**: 7.1\n- **EPSS Score**: 0.00295\n- **EPSS Percentile**: 21.63%\n- **Impact**: Guardrail Policy Bypass\n- **Exploit Status**: POC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Omnigent Framework\n- **Omnigent**: < v0.3.0 (Fixed in: `v0.3.0`)\n\n## Mitigation\n\n- Upgrade the Omnigent AI framework to version v0.3.0 or later.\n- Restrict shell interpreters available within the execution environment.\n- Configure branch protection rules on repositories mapped to coding agents.\n\n**Remediation Steps:**\n1. Identify all deployment instances running Omnigent framework versions prior to v0.3.0.\n2. Update dependencies in requirements.txt or poetry configs to target omnigent>=0.3.0.\n3. Apply the patch manually to policies/builtins/_shell.py if direct framework upgrades are barred.\n4. Verify parsing improvements using test suites executing nested command configurations.\n\n## References\n\n- [GitHub Security Advisory GHSA-7mqg-cx4g-x2rf](https://github.com/omnigent-ai/omnigent/security/advisories/GHSA-7mqg-cx4g-x2rf)\n- [NVD Entry for CVE-2026-62676](https://nvd.nist.gov/vuln/detail/CVE-2026-62676)\n- [Vulnerability Fix Pull Request](https://github.com/omnigent-ai/omnigent/pull/389)\n- [Vulnerability Fix Commit](https://github.com/omnigent-ai/omnigent/commit/1a05b7b139ef504bf2be89bf37918abe104fb95c)\n- [Omnigent v0.3.0 Release](https://github.com/omnigent-ai/omnigent/releases/tag/v0.3.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62676) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T09:31:44.273501Z"}, {"uuid": "0525135a-d8a3-4cc3-976c-52fee2f79893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3mumcauq7qa2a", "content": "Nearly 22,000 Microsoft Exchange servers remain unpatched against CVE-2026-62911, a critical authentication bypass vulnerability, according to daily scans from the Shadowserver Foundation. www.helpnetsecurity.com/2026/09/02/m...", "creation_timestamp": "2026-09-03T11:00:03.159507Z"}, {"uuid": "b4aa789e-ab53-4e17-8411-34146727bcbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62735\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 10:43:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWindows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-03T12:00:05.952802Z"}, {"uuid": "b19057cc-1fed-42f6-875e-3f296cbf04b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62669", "type": "seen", "source": "https://gist.github.com/alon710/fb22df514827698e37bf556e10bb1199", "content": "# CVE-2026-62669: CVE-2026-62669: Critical Two-Factor Authentication Bypass in Grav CMS Login Plugin\n\n> **CVSS Score:** 7.4\n> **Published:** 2026-09-02\n> **Full Report:** https://cvereports.com/reports/CVE-2026-62669\n\n## Summary\nCVE-2026-62669 is a critical Improper Authentication vulnerability (CWE-287) in the Grav Login Plugin for Grav CMS. Prior to version 3.8.11, the plugin's key rotation task failed to verify if a user session was fully authorized before regenerating and returning two-factor authentication (2FA) secrets. Consequently, an attacker possessing a victim's primary credentials could invoke this endpoint to replace the 2FA secret, retrieve the replacement, and bypass the MFA constraint entirely.\n\n## TL;DR\nA logical validation flaw in the Grav Login Plugin allows an attacker with valid primary credentials to out-of-band regenerate and read the victim's 2FA secret, successfully bypassing multi-factor protection.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-287\n- **Attack Vector**: Network\n- **CVSS Score**: 7.4 (High)\n- **EPSS Score**: 0.00386\n- **Impact**: Two-Factor Authentication Bypass\n- **Exploit Status**: Proof-of-Concept\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Grav CMS Core\n- Grav Login Plugin\n- **grav-plugin-login**: < 3.8.11 (Fixed in: `3.8.11`)\n- **grav**: < 2.0.4 (Fixed in: `2.0.4`)\n\n## Mitigation\n\n- Upgrade the Grav Login Plugin to version 3.8.11 or higher.\n- Upgrade Grav CMS Core to version 2.0.4 or higher.\n- Deploy WAF rules to restrict access to the task:login.regenerate2FASecret endpoint.\n\n**Remediation Steps:**\n1. Navigate to the Grav CMS administration panel.\n2. Access the 'Plugins' management tab.\n3. Locate the 'Login' plugin and trigger the update action to retrieve version 3.8.11.\n4. If utilizing command-line administration, execute: bin/gpm update login\n5. Verify the update succeeded and test login flows to ensure session state persists properly.\n\n## References\n\n- [GitHub Security Advisory GHSA-7mgc-c7pq-3rr3](https://github.com/getgrav/grav/security/advisories/GHSA-7mgc-c7pq-3rr3)\n- [Grav Commit 5d1b722298cb](https://github.com/getgrav/grav-plugin-login/commit/5d1b722298cb947d8f434025d121b99152a2c630)\n- [Grav Login Plugin Release 3.8.11](https://github.com/getgrav/grav-plugin-login/releases/tag/3.8.11)\n- [Grav CMS Release 2.0.4](https://github.com/getgrav/grav/releases/tag/2.0.4)\n- [Wiz Vulnerability Database Details](https://www.wiz.io/vulnerability-database/cve/cve-2026-62669)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-62669) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-03T14:32:32.686913Z"}, {"uuid": "92af10d8-8e82-4495-b648-eba201b8799e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mumtckes4c25", "content": "Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911)\n\nNearly 22,000 Microsoft Exchange servers remain unpatched against CVE-2026-62911, a critical authentication bypass vulnerability, according to daily scans from the Shadow\u2026\n#hackernews #microsoft #news", "creation_timestamp": "2026-09-03T16:05:12.243562Z"}, {"uuid": "ea0f9b56-c663-4323-9199-2da9b71feaa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mumyatvjgx2w", "content": "Install the latest Microsoft Exchange security patches immediately to mitigate CVE-2026-62911, which enables full system access on unpatched Exchange servers.\n", "creation_timestamp": "2026-09-03T17:33:45.310399Z"}, {"uuid": "3bc0ec7a-5eda-467b-9c7e-2a0d4db64187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/eudatabriefly.bsky.social/post/3mumyecmbch2b", "content": "Install the latest Microsoft Exchange security patches immediately to mitigate CVE-2026-62911, which enables full system access on unpatched Exchange servers.\n", "creation_timestamp": "2026-09-03T17:35:41.760826Z"}, {"uuid": "bc70f63e-0bf6-48f3-9875-21ca89d97143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mumyemq2sl2j", "content": "Install the latest Microsoft Exchange security patches immediately to mitigate CVE-2026-62911, which enables full system access on unpatched Exchange servers.\n", "creation_timestamp": "2026-09-03T17:35:53.103957Z"}, {"uuid": "77746cf3-06ef-4522-90ea-50a19dd86444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/artia13city.bsky.social/post/3mun2bsid4z25", "content": "Pr\u00e8s de 22 000 serveurs Exchange Server vuln\u00e9rables \u00e0 la CVE-2026-62911. \nLire l'article complet sur : artia13.city \n#artia13\u00a0#Technologie  ", "creation_timestamp": "2026-09-03T18:10:04.328489Z"}, {"uuid": "1cc33e34-52b2-43c5-9a9d-7b14742ef876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62681", "type": "published-proof-of-concept", "source": "https://github.com/orval-labs/orval/security/advisories/GHSA-fg9p-mrxr-hvq7", "content": "", "creation_timestamp": "2026-09-03T20:35:13.872167Z"}, {"uuid": "e7d52c19-2506-49fd-9381-dcc3b682b2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62682", "type": "published-proof-of-concept", "source": "https://github.com/orval-labs/orval/security/advisories/GHSA-88f2-fpv8-89q2", "content": "", "creation_timestamp": "2026-09-03T20:35:16.717899Z"}, {"uuid": "11ce4643-8d68-43ce-9686-1bf6e7196be4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/a1a2c62305863737a54deb28c605d62d", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-03\n\n**Run time:** 2026-09-03T23:05:17.862016+00:00\n**Ideas cleared 15/25:** 25\n\n## 1. Toward federated large language models in medicine: a parameter-efficient framework for privacy-preserving, multi-institutional adaptation | npj Digital Medicine\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nToward federated large language models in medicine: a parameter-efficient framework for privacy-preserving, multi-institutional adaptation | npj Digital Medicine\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.nature.com/articles/s41746-026-03064-9](https://www.nature.com/articles/s41746-026-03064-9)\n\n---\n\n## 2. V3-Gemma: an on-device multimodal framework for depression screening through clinical-computational alignment | Scientific Reports\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nV3-Gemma: an on-device multimodal framework for depression screening through clinical-computational alignment | Scientific Reports\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.nature.com/articles/s41598-026-66136-6](https://www.nature.com/articles/s41598-026-66136-6)\n\n---\n\n## 3. Fei-Fei Li's World Labs debuts Atlas, a world model showcase for advanced spatial intelligence - SiliconANGLE\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFei-Fei Li's World Labs debuts Atlas, a world model showcase for advanced spatial intelligence - SiliconANGLE\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://siliconangle.com/2026/09/01/fei-fei-lis-world-labs-debuts-atlas-a-world-model-showcase-for-advanced-spatial-intelligence/](https://siliconangle.com/2026/09/01/fei-fei-lis-world-labs-debuts-atlas-a-world-model-showcase-for-advanced-spatial-intelligence/)\n\n---\n\n## 4. Science Center | The Clinical Validation Gap: Why Promising Medtech\u2026\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nScience Center | The Clinical Validation Gap: Why Promising Medtech\u2026\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://sciencecenter.org/blog/the-clinical-validation-gap](https://sciencecenter.org/blog/the-clinical-validation-gap)\n\n---\n\n## 5. Chimeric receptor with NKG2D specificity for use in cell therapy against cancer and infectious disease (US Patent 12698476)\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nChimeric receptor with NKG2D specificity for use in cell therapy against cancer and infectious disease (US Patent 12698476)\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://exa.ai/library/legal/patent/zzgt8qcw0l7w607sr6bwhy](https://exa.ai/library/legal/patent/zzgt8qcw0l7w607sr6bwhy)\n\n---\n\n## 6. CN122628952A \u2013 An engineered probiotic outer membrane vesicle vaccine co-expressing multiple antigens of monkeypox virus, and a preparation method and application thereof | Patsnap Eureka\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCN122628952A \u2013 An engineered probiotic outer membrane vesicle vaccine co-expressing multiple antigens of monkeypox virus, and a preparation method and application thereof | Patsnap Eureka\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://eureka.patsnap.com/patent/CN122628952A](https://eureka.patsnap.com/patent/CN122628952A)\n\n---\n\n## 7. CN122655882A \u2013 Integrated physical information graph neural network acceleration core and potential field regulation method thereof | Patsnap Eureka\n\n**Score:** `18/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCN122655882A \u2013 Integrated physical information graph neural network acceleration core and potential field regulation method thereof | Patsnap Eureka\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://eureka.patsnap.com/patent/CN122655882A](https://eureka.patsnap.com/patent/CN122655882A)\n\n---\n\n## 8. Truth or Consequences Water Crisis Exposes Century-Old Pipes Under\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nMunicipal water utilities across the US operate on infrastructure that is decades to centuries old, with no real-time visibility into pipe condition, failure risk, or asset health. Cities like Truth or Consequences only learn about decay after catastrophic failures, because incumbents rely on manual inspection, fragmented GIS systems, and siloed SCADA data that no one stitches together. There is no affordable, continuously-updating 'infrastructure decay intelligence layer' that municipalities can deploy without ripping out existing systems.\n\n### Why Tardis Wins\nTardis can ingest heterogeneous municipal data sources (SCADA telemetry, work-order history, soil/corrosion records, satellite imagery, weather feeds) via Cloudflare Workers, normalize them into a knowledge graph of pipe assets with condition scores, and run AI agents that predict failure zones weeks in advance. The AI Gateway plus R2 gives a cost structure incumbents like Bentley or ESRI cannot match for small-to-mid cities, and LLM-powered agents can generate plain-English briefings for city managers who aren't GIS experts.\n\n### Approach\nFirst, partner with one mid-size municipality (or a progressive US state DOT/water authority) to ingest their existing asset registry + 2-3 years of break history into a Cloudflare-hosted knowledge graph and ship a failure-prediction dashboard within 6 weeks. Second, use the pilot to productize a turnkey 'Infrastructure Decay Agent' template that other cities self-serve via the AI Gateway.\n\n### Revenue Model\nPer-municipality SaaS subscription tiered by population served, plus usage-based fees on AI Gateway compute for prediction runs and alerting.\n\n### Risks\nMunicipal procurement cycles are slow, risk-averse, and dominated by existing vendor lock-in (ESRI, Bentley, Accela), so landing the first design partner requires either a grant-funded pilot or a champion inside city hall.\n\n**Source:** [https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/](https://hoodline.com/2026/09/truth-or-consequences-water-crisis-exposes-century-old-pipes-under-city/)\n\n---\n\n## 9. Nearly 22,000 Microsoft Exchange servers remain exposed to critical security flaw (CVE-2026-62911) - Help Net Security\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\n22,000 unpatched Exchange servers reveal a massive attack-surface-visibility gap: organizations don't know what they own, what's exposed, or what's reachable from the internet. Traditional vulnerability scanners (Qualys, Tenable) are agent-based, slow, and priced for enterprises \u2014 leaving mid-market companies, public sector, and India's SMB/large-enterprise hybrid estates effectively blind between patch cycles.\n\n### Why Tardis Wins\nTardis can run a continuous, passive+active external attack-surface monitor entirely on Cloudflare Workers at the edge \u2014 distributed scanning from 300+ PoPs makes detection faster and harder to block than single-region scanners. AI agents can autonomously triage CVEs against discovered assets, a D1-backed knowledge graph maps server\u2192org\u2192exposure\u2192business-criticality, and the AI Gateway can ingest threat intel (NVD, CISA KEV, Shodan) into real-time R2/D1 pipelines that push alerts within minutes of disclosure \u2014 a 10x cost and latency advantage over legacy enterprise tooling.\n\n### Approach\nShip a focused MVP that (1) ingests active CVEs from NVD/CISA KEV via a Cloudflare Worker cron pipeline, (2) scans a curated set of Indian .in and enterprise domains for the specific exposure pattern, and (3) delivers a paid 'Am I Exposed?' report plus subscription monitoring \u2014 using the India tech-product positioning to wedge in against global incumbents.\n\n### Revenue Model\nTiered SaaS subscription per monitored asset/domain (e.g., \u20b9X/asset/month for continuous monitoring + \u20b9Y for one-shot CVE exposure reports), with premium AI-agent-led remediation playbooks sold to mid-market and enterprise security teams.\n\n### Risks\nScanning third-party infrastructure carries legal and ToS risk (must default to opt-in + authorized scanning only), and free public tools like Shodan/Censys commoditize raw exposure data \u2014 so the moat must come from AI-driven prioritization and remediation guidance, not just detection.\n\n**Source:** [https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/](https://www.helpnetsecurity.com/2026/09/02/microsoft-exchange-cve-2026-62911-critical-authentication-bypass-flaw/)\n\n---\n\n## 10. Shipsy Launches \u2018Shipsy Brain\u2019, a Logistics Intelligence Layer for Enterprise | Business News This Week\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nShipsy's 'Brain' signals that logistics intelligence is becoming a mandatory layer, but Shipsy only solves this for its own TMS/WMS customers. The 95% of logistics operators\u2014mid-tier freight forwarders, 3PLs, regional last-mile fleets, bonded warehouses\u2014still run on fragmented ERPs, spreadsheets, and WhatsApp groups with zero predictive intelligence or autonomous exception handling.\n\n### Why Tardis Wins\nTardis can ship a horizontal 'intelligence layer' deployable as a Cloudflare Worker at any logistics node\u2014ingesting events from any TMS/ERP via webhook, building a supply-chain knowledge graph on D1/R2, and running agentic decision loops (rerouting, ETA recomputation, customs risk) at edge latency. This sidesteps Shipsy's lock-in by being bolt-on, and the edge architecture collapses the per-shipment inference cost that makes enterprise AI layers unaffordable for mid-market operators.\n\n### Approach\nFirst, prototype a knowledge-graph schema for a single vertical (e.g., Indian EXIM container movement) and wire it to one free-tier freight forwarder's data feed via Cloudflare Workers + AI Gateway. Validate the 'exception prediction \u2192 agent action' loop with 2-3 design partners before building the multi-vertical product.\n\n### Revenue Model\nUsage-based pricing per shipment/TEU processed through the intelligence layer, plus a margin share on autonomous actions taken (e.g., 2% of recovered demurrage charges).\n\n### Risks\nShipsy and incumbents (FourKites, project44) have entrenched customer data and integration moats; winning requires being 10x cheaper and embeddable, not feature-complete.\n\n**Source:** [https://businessnewsthisweek.com/business/shipsy-launches-shipsy-brain-a-logistics-intelligence-layer-for-enterprise/](https://businessnewsthisweek.com/business/shipsy-launches-shipsy-brain-a-logistics-intelligence-layer-for-enterprise/)\n\n---\n\n## 11. CJ Logistics America Chooses OneTrack's AiOn to Deploy Agentic AI Across 40+ Warehouses | The AI Journal\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnterprise logistics AI deployments like OneTrack's AiOn are monolithic, vendor-locked platforms that take quarters to roll out across warehouse networks. Mid-market and regional logistics operators lack access to modular, edge-deployable agentic AI that can integrate with existing WMS/WCS without rip-and-replace. The market needs composable AI orchestration that plugs into heterogeneous warehouse tech stacks rather than imposing a single vision stack.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers architecture is ideal for edge-deployed AI agents that process vision and sensor data locally at each warehouse, keeping latency low and bandwidth costs minimal. An agent orchestration layer on Workers + R2 can serve as a vendor-neutral middleware\u2014routing inferences through AI Gateway, persisting operational knowledge in a knowledge graph, and giving each warehouse a lightweight, independently updatable agent fleet instead of a centralized monolith.\n\n### Approach\nBuild a reference architecture on Cloudflare Workers demonstrating a multi-agent warehouse AI (forklift detection, dock-door monitoring, inventory anomaly flagging) deployable per-warehouse via Wrangler in under an hour. Then approach 3-5 mid-market 3PLs and regional distributors as design partners to validate against real WMS integrations before engaging larger players.\n\n### Revenue Model\nPer-warehouse monthly SaaS fee for the agent orchestration layer, plus usage-based inference billing through Cloudflare AI Gateway margins.\n\n### Risks\nVision-AI incumbents like OneTrack have proprietary datasets and signed enterprise contracts that create switching costs; Tardis must win on integration speed and cost-per-warehouse, not accuracy parity.\n\n**Source:** [https://aijourn.com/cj-logistics-america-chooses-onetracks-aion-to-deploy-agentic-ai-across-40-warehouses/](https://aijourn.com/cj-logistics-america-chooses-onetracks-aion-to-deploy-agentic-ai-across-40-warehouses/)\n\n---\n\n## 12. Analysis-Emerging markets march out of \u2018valley of tears\u2019 as investors diversify \u2013 Regional Media News\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAs investors diversify out of concentrated US tech exposure into emerging markets, there is no real-time, structured intelligence layer that synthesizes cross-regional signals (capital flows, sentiment, policy shifts, sector rotation) at sub-second latency. Retail and emerging fund managers still rely on either $30K/year Bloomberg terminals or noisy, untranslated regional news feeds \u2014 the mid-market is structurally underserved.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers + R2 + D1 stack can ingest and normalize dozens of multilingual regional sources at edge speed for near-zero compute cost, while orchestration agents run sentiment extraction, entity resolution, and cross-market correlation in parallel. The knowledge graph layer maps issuer\u2192sector\u2192macro-policy\u2192capital-flow relationships that incumbents charge enterprise prices for, and Workers AI keeps the marginal analysis cost fractions of a cent per signal.\n\n### Approach\nStand up a 'Emerging Markets Pulse' pipeline: (1) wire 15-20 priority regional sources through a Worker-based ingestion layer with D1 for metadata and R2 for raw archives, (2) deploy an agent that runs daily entity/sentiment extraction and pushes results into a knowledge graph exposed via a queryable API.\n\n### Revenue Model\nTiered SaaS subscription ($99/mo pro, $999/mo desk) plus API access for fintech platforms embedding emerging-market signals.\n\n### Risks\nData licensing and per-jurisdiction redistribution rights for financial content can block commercialization and force reliance on scrapeable but legally gray sources.\n\n**Source:** [https://www.regionalmedianews.com/news/national/business/analysis-emerging-markets-march-out-of-valley-of-tears-as-investors-diversify/](https://www.regionalmedianews.com/news/national/business/analysis-emerging-markets-march-out-of-valley-of-tears-as-investors-diversify/)\n\n---\n\n## 13. IMF's Georgieva says rising bond yields threaten progress on developing country debt - BusinessWorld Online\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nRising bond yields are exposing developing countries to sudden debt distress, but most sovereign risk intelligence sits behind expensive institutional terminals (Bloomberg, Refinitiv) or arrives as fragmented news. There is no affordable, real-time, AI-curated early-warning layer that fuses yield movements, IMF/credit-rating signals, and country-specific debt profiles into actionable briefs for emerging market lenders, DFIs, fintech platforms, and diaspora-bond issuers.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers stack enables global edge ingestion of yield curves and policy feeds at near-zero marginal cost, while AI agents can continuously synthesize IMF statements, central bank actions, and debt-service schedules into a knowledge graph that maps causation across 50+ EM sovereigns \u2014 a depth and freshness no incumbent terminal replicates. The India-first focus provides a calibrated anchor (G-Sec yields, RBI policy, INR debt) that generalist tools lack, and the orchestration layer can ship deliverables (daily briefs, API signals, WhatsApp alerts) tailored to fintech NBFCs and DFI analysts who can't afford Bloomberg.\n\n### Approach\nStand up a minimal viable 'EM Debt Early Warning' pipeline on Cloudflare Workers + R2 that ingests 10-year bond yields for ~30 key developing sovereigns, scrapes IMF/Moody's/S&P headlines, and uses an AI agent to generate a daily ranked-risk brief stored in a knowledge graph. Pilot with 3-5 design partners \u2014 an Indian fintech lender, a diaspora bond platform, and a DFI analyst desk \u2014 before broadening.\n\n### Revenue Model\nTiered SaaS subscriptions (analyst dashboard + alerts) plus per-seat API pricing for programmatic access by lending platforms and DFI risk teams.\n\n### Risks\nAcquisition risk: institutional sovereign-debt desks are sticky on Bloomberg/Refinitiv, so growth depends on winning next-wave fintech lenders, DFIs, and diaspora-bond platforms who are currently underserved.\n\n**Source:** [https://bworldonline.com/world/2026/09/03/774362/imfs-georgieva-says-rising-bond-yields-threaten-progress-on-developing-country-debt/](https://bworldonline.com/world/2026/09/03/774362/imfs-georgieva-says-rising-bond-yields-threaten-progress-on-developing-country-debt/)\n\n---\n\n## 14. Bridging Pharma and Startups: What It Really Takes to Scale Digital Health Innovation\n\n**Score:** `17/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBridging Pharma and Startups: What It Really Takes to Scale Digital Health Innovation\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://thebigunlock.com/2026/08/10/bridging-pharma-and-startups-what-it-really-takes-to-scale-digital-health-innovation/](https://thebigunlock.com/2026/08/10/bridging-pharma-and-startups-what-it-really-takes-to-scale-digital-health-innovation/)\n\n---\n\n## 15. Microsoft Exchange Exploit Requires No Password: 22,000 Servers Exposed, ESU Ends October\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nOrganizations running self-managed Exchange have an urgent need to identify exposed instances, determine actual compromise, deploy compensating controls, and migrate before Microsoft support ends in October. Existing security products are often expensive, endpoint-centric, or fail to correlate vulnerability exposure with tenant, server, administrator, and mail-flow risk.\n\n### Why Tardis Wins\nTardis can combine Cloudflare Workers-based collectors and alerting with lightweight agents that analyze Exchange, IIS, EDR, and network data, then use AI agents to prioritize remediation and a knowledge graph to map each vulnerable server to business-critical users and dependencies. This can deliver a lower-cost, India-focused managed exposure and migration service without requiring customers to rip and replace their email stack immediately.\n\n### Approach\nLaunch a 48-hour Exchange Exposure Assessment that passively discovers public services and versions, validates patch status and indicators of compromise, and assigns a business-impact score. Convert assessments into a recurring managed-protection subscription while packaging an accelerated Exchange migration or compensating-control deployment service for the October deadline.\n\n### Revenue Model\nCharge a setup fee for each assessment plus recurring per-server monitoring, managed protection, and migration fees.\n\n### Risks\nVulnerability details and internet exposure counts may change rapidly, so Tardis must validate its data sources and clearly distinguish version exposure from confirmed compromise.\n\n**Source:** [https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm](https://www.techtimes.com/articles/326275/20260902/microsoft-exchange-exploit-requires-no-password-22000-servers-exposed-esu-ends-october.htm)\n\n---\n\n## 16. Korea Becomes First to Send 11.5-Tonne Autonomous Trucks Through Signalized City Traffic\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nAutonomous trucking is advancing rapidly in hardware and driving AI, but the orchestration layer is underserved: real-time V2X data pipelines, multi-jurisdiction regulatory knowledge, fleet coordination, and edge inference for 11.5-tonne vehicles interacting with city infrastructure. Incumbents like TuSimple and Aurora build vertically; nobody owns the neutral data-and-intelligence substrate that lets multiple fleets, cities, and signal systems interoperate.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this: Cloudflare Workers give sub-50ms edge inference for V2X signal negotiation without round-tripping to a central cloud, R2 cheaply archives the petabytes of sensor/ video telemetry per truck per day, D1 + knowledge graphs encode traffic rules and signal phase data across jurisdictions, and AI agents orchestrate fleet routing and exception handling. This is a globally distributed, latency-sensitive, data-heavy problem \u2014 exactly what the Tardis stack is optimized for versus centralized hyperscaler stacks.\n\n### Approach\nFirst, build a knowledge graph of signalized intersection APIs and AV-trucking regulations across 10 priority corridors (Korea, US, Japan, India freight corridors) and expose it as a Workers-based API. Second, pilot the edge V2X inference and telemetry pipeline with one Korean autonomous freight partner or municipal transport authority to anchor the reference deployment before the market consolidates around a vertical incumbent.\n\n### Revenue Model\nPer-truck monthly SaaS for the orchestration/edge intelligence layer, plus usage-based fees for V2X signal API calls and R2-stored telemetry retrieval.\n\n### Risks\nVertically integrated AV-trucking players (Aurora, Plus, Waabi) may build proprietary equivalents and lock fleets in before a neutral layer gains adoption.\n\n**Source:** [https://www.techtimes.com/articles/323275/20260806/korea-becomes-first-send-115-tonne-autonomous-trucks-through-signalized-city-traffic.htm](https://www.techtimes.com/articles/323275/20260806/korea-becomes-first-send-115-tonne-autonomous-trucks-through-signalized-city-traffic.htm)\n\n---\n\n## 17. FedEx and Dexterity Expand Physical AI Deployment for Autonomous Trailer Loading at Hagerstown Hub\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDexterity and FedEx are solving the physical manipulation layer (robots loading trailers), but the orchestration, exception handling, and intelligence layer above the robots is wide open. Each hub generates high-velocity sensor and event streams that today are siloed in proprietary robot controllers \u2014 there's no fleet-level knowledge graph linking trailer types, SKU profiles, dock schedules, and throughput anomalies into something a logistics operator can actually act on.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this edge-to-aggregation pattern: Cloudflare Workers ingest robot telemetry and dock sensor events at the edge, R2 stores the raw streams cheaply, D1 + a knowledge graph model the facility/dock/SKU/trailer relationships, and AI agents run exception playbooks (e.g., 're-routing this misaligned tote to bay 4'). Versus incumbents like Palantir or Snowflake, Tardis can deliver this at per-hub economics that make sense for mid-market 3PLs and India-based shippers, not just FedEx-scale players.\n\n### Approach\nFirst, prototype an event-ingestion + anomaly-detection layer on Cloudflare Workers using publicly-available FedEx hub throughput data and Dexterity case study metrics to demonstrate ROI. Second, partner with one India-based 3PL or cold-chain operator (Delhivery, Snowman, ColdEx) to pilot the orchestration layer alongside their existing manual or semi-automated dock operations.\n\n### Revenue Model\nPer-hub / per-dock SaaS subscription for the orchestration and analytics layer, with usage-based fees on events processed through the edge pipeline.\n\n### Risks\nDexterity and competitors (Symbotic, Berkshire Grey) are likely building proprietary orchestration stacks vertically, and winning a wedge requires displacing or integrating past their data moats.\n\n**Source:** [https://theaiinsider.tech/2026/08/31/fedex-and-dexterity-expand-physical-ai-deployment-for-autonomous-trailer-loading-at-hagerstown-hub/](https://theaiinsider.tech/2026/08/31/fedex-and-dexterity-expand-physical-ai-deployment-for-autonomous-trailer-loading-at-hagerstown-hub/)\n\n---\n\n## 18. The Collab Economy: Why Every Brand Suddenly Wants to Wear Another Brand\u2019s Logo | BBF Digital\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** immediate \u00b7 **Effort:** Medium\n\n### The Gap\nBrands lack a real-time system to discover, evaluate, and execute culturally relevant logo and product collaborations before trends peak. Existing tools provide scattered social listening, weak partner-fit analysis, and little automated handling of audience overlap, brand safety, or campaign measurement.\n\n### Why Tardis Wins\nTardis can combine Cloudflare Workers for high-volume ingestion and campaign APIs, durable data pipelines for market signals, AI agents for partner discovery and risk analysis, and knowledge graphs for modeling brand identity, audiences, categories, and past collaborations. This creates a continuously updated collaboration graph and decision engine that is more current, explainable, and actionable than generic trend dashboards or agency intuition.\n\n### Approach\nBuild a focused MVP that ingests social, search, commerce, cultural, and trademark signals; scores potential brand-pairings; and generates briefs with audience overlap, novelty, brand-safety risks, estimated demand, and a monitoring plan. Pilot it with India-focused D2C, fashion, entertainment, and consumer-tech brands, then add campaign tracking and managed partnership introductions as usage proves demand.\n\n### Revenue Model\nCharge brands a recurring intelligence-platform subscription, with higher-tier market-graph access, API integration, and paid managed partner-discovery services.\n\n### Risks\nTrend signals can be noisy, short-lived, or culturally misinterpreted, so inaccurate recommendations or a backlash against a mismatched collaboration could quickly damage brand trust.\n\n**Source:** [https://bbf.digital/the-collab-economy-why-every-brand-suddenly-wants-to-wear-another-brands-logo](https://bbf.digital/the-collab-economy-why-every-brand-suddenly-wants-to-wear-another-brands-logo)\n\n---\n\n## 19. Flexport\u2019s Alleged Last-Mile Spinoff Is Rattling 3PL Insiders \u2013 Online Store News\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nWhen a freight-forwarding giant like Flexport carves out its last-mile arm, downstream 3PLs and DTC merchants face immediate rate-card, SLA, and capacity uncertainty \u2014 and the existing tooling (ShipStation, ShipBob, legacy TMS) gives them no unified, real-time view across competing last-mile carriers. The broken piece is decision intelligence: merchants are still picking carriers on stale rate sheets and gut feel rather than continuous, multi-carrier optimization.\n\n### Why Tardis Wins\nTardis's stack is purpose-built for this \u2014 Cloudflare Workers + D1 + R2 can ingest carrier APIs, tracking webhooks, and rate feeds at the edge in real time, while AI agents (orchestrated via the AI Gateway) continuously shop rates, predict exceptions, and re-route. A knowledge graph of carrier-zones-SLAs-SKUs lets the agent reason about trade-offs (cost vs. transit time vs. failure rate) the way a senior logistics analyst would, but at a per-shipment cost incumbents can't match.\n\n### Approach\nFirst, stand up an agent that scrapes and structures 3PL market signals (news, carrier announcements, rate changes) into the knowledge graph so Tardis sees the Flexport-shaped hole before competitors do. Second, prototype a 'last-mile router' agent for 2-3 design partners \u2014 a Shopify or Meesho merchant plus a mid-market 3PL \u2014 that ingests their order stream and outputs a carrier recommendation per shipment with a clear cost/SLA delta.\n\n### Revenue Model\nPer-shipment optimization fee (sub-cent, processed at the edge) plus a SaaS tier for the market-intelligence dashboard and knowledge-graph API.\n\n### Risks\nLogistics is a thin-margin, relationship-driven business where switching costs are high and regional last-mile carriers dominate, so trust-building and carrier-API access will be the bottleneck, not the technology.\n\n**Source:** [https://onlinestorenews.com/flexports-alleged-last-mile-spinoff-is-rattling-3pl-insiders/](https://onlinestorenews.com/flexports-alleged-last-mile-spinoff-is-rattling-3pl-insiders/)\n\n---\n\n## 20. Flexport\u2019s Alleged Warehouse Network Grab Is Rattling 3PL Operators \u2013 Ecommerce Times\n\n**Score:** `17/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFlexport's vertical expansion into owned warehouse infrastructure is creating an existential threat to independent 3PL operators, but the industry lacks a neutral, real-time intelligence layer that lets 3PLs discover alternative warehousing capacity, benchmark Flexport's pricing pressure, and coordinate responses. Small and mid-market 3PLs are flying blind on Flexport's footprint expansion, contract terms offered to their shipper clients, and which warehouse partners are quietly being acquired or locked up.\n\n### Why Tardis Wins\nTardis can build the 'S&P Global for warehouse intelligence' \u2014 using Cloudflare Workers for a globally distributed scraping/API aggregation layer, real-time data pipelines ingesting carrier filings, SEC data, and warehouse listings, a knowledge graph modeling relationships between Flexport, acquired operators, and remaining independents, and AI agents that autonomously monitor Flexport's moves and generate weekly threat briefings for 3PL customers. Unlike legacy logistics data vendors (Descartes, project44) built on monolithic stacks, Tardis's edge-native architecture delivers sub-second queries on warehouse metadata at a fraction of the cost.\n\n### Approach\nShip a '3PL Defense Dashboard' MVP within 6 weeks: ingest public warehouse listings, DOT filings, and Flexport's announced acquisitions into a D1-backed warehouse graph, expose it via a Workers API with an AI Gateway-powered natural-language query layer, and recruit 5 design-partner 3PLs to validate willingness-to-pay before scaling.\n\n### Revenue Model\nTiered SaaS subscriptions ($500\u2013$5K/mo) per 3PL for warehouse intelligence dashboards plus a transaction fee on any re-routed freight that moves through the Tardis-matched alternative warehouse network.\n\n### Risks\nFlexport and incumbent logistics data vendors (project44, FourKites) have deep shipper relationships and could either acquire competing intelligence players or lock down warehouse data sources first.\n\n**Source:** [https://ecommerce-times.com/flexports-alleged-warehouse-network-grab-is-rattling-3pl-operators/](https://ecommerce-times.com/flexports-alleged-warehouse-network-grab-is-rattling-3pl-operators/)\n\n---\n\n## 21. AI automates the creation of custom functional materials atom by atom\n\n**Score:** `16/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAI automates the creation of custom functional materials atom by atom\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://phys.org/news/2026-09-ai-automates-creation-custom-functional.html](https://phys.org/news/2026-09-ai-automates-creation-custom-functional.html)\n\n---\n\n## 22. Google Patent: Radar Gesture Detection for Ambient Computing\n\n**Score:** `16/25` \u00b7 **Type:** Research-to-Product Gap \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nGoogle Patent: Radar Gesture Detection for Ambient Computing\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://patentlyze.com/patent/google-radar-gesture-detection-ambient-computing/](https://patentlyze.com/patent/google-radar-gesture-detection-ambient-computing/)\n\n---\n\n## 23. UN charts course to manage global warming-limit breach - The Hindu\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAs the UN formalizes frameworks for managing breached warming limits, a massive compliance and monitoring infrastructure gap emerges. Current climate tracking relies on fragmented, slow legacy systems\u2014country NDCs, corporate ESG disclosures, and IPCC-style reports that are months-to-years stale. No real-time intelligence layer exists to translate new UN/global policy into actionable, auditable compliance signals for governments and corporations, especially across emerging markets like India where data infrastructure is weakest.\n\n### Why Tardis Wins\nTardis's Cloudflare Workers + real-time data pipelines can ingest and normalize emissions, policy, and compliance signals globally at edge speed, replacing the current batch-report paradigm. Knowledge graphs are uniquely suited to model the relational web of commitments \u2192 sector targets \u2192 facility-level progress \u2192 breach implications that AI agents can then monitor continuously. This stack ships far cheaper and faster than incumbent climate-data platforms (Bloomberg ESG, MSCI Carbon, CDP) which are enterprise-priced and retrofitting AI onto monolithic architectures.\n\n### Approach\nStand up a 'Climate Breach Intelligence' MVP on Cloudflare Workers that scrapes UNFCCC/UN policy feeds plus India's CEA, CPCB, and BRSR corporate disclosures into a D1-backed knowledge graph, then deploys an AI agent that alerts subscribers when policy actions materially shift their compliance posture. Pilot with 5-10 Indian corporates in carbon-intensive sectors (steel, cement, power) before expanding to SE Asia.\n\n### Revenue Model\nSaaS subscriptions from corporate sustainability/compliance teams plus tiered API access for consultants, auditors, and investors.\n\n### Risks\nGovernment procurement cycles and access to authoritative emissions data are gatekept by ministries that may resist real-time transparency.\n\n**Source:** [https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece](https://www.thehindu.com/sci-tech/energy-and-environment/global-warming-will-exceed-limit-un-says-in-a-report-that-maps-path-to-get-back-below-danger-zone/article71418475.ece)\n\n---\n\n## 24. Logistics Tech 2026: Warehouse Robots, Drones & AI - INT News\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe logistics robotics boom is hardware-rich but orchestration-poor \u2014 companies like Amazon Robotics, Symbotic, and Locus dominate warehouses but leave mid-market and emerging-market operators (especially India) without affordable, interoperable intelligence layers to coordinate heterogeneous robot/drone/human fleets in real time. The real opportunity sits in the coordination software, not the bots themselves, which most Indian 3PLs, dark stores, and D2C fulfillment centers desperately need but can't afford from Western vendors.\n\n### Why Tardis Wins\nTardis's stack maps almost 1:1 to this problem: Cloudflare Workers + Durable Objects give sub-millisecond global edge orchestration ideal for fleet coordination, AI agents can run adaptive task allocation across robots and humans, and knowledge graphs can model warehouse topology, SKU velocity, and drone flight corridors. Compared to incumbents who ship heavy on-prem WMS stacks requiring six-month deployments, Tardis can offer a lightweight, API-first, pay-per-robot SaaS layer that slots on top of any hardware \u2014 a wedge Walmart-Amazon-tier players won't bother building for mid-market.\n\n### Approach\nBuild a Fleet Orchestration MVP targeting Indian quick-commerce dark stores (Zepto, Blinkit, Swiggy Instamart suppliers) \u2014 an AI agent layer that ingests telemetry from existing AMRs, schedules drone inventory sweeps, and optimizes picker routing via Workers + a knowledge graph of warehouse state. Land one paying pilot in 60 days, then expand horizontally to UAE/Saudi logistics free zones.\n\n### Revenue Model\nPer-robot or per-warehouse monthly SaaS fee for the orchestration/AI intelligence layer, plus usage-based pricing for AI inference and data pipeline throughput via Cloudflare AI Gateway.\n\n### Risks\nHardware integration complexity and incumbent free bundling (Amazon/Symbotic offering 'free' orchestration for their own bots) could squeeze standalone software plays.\n\n**Source:** [https://intnews.it/en/logistics-tech-2026-warehouse-robots-drones-ai/](https://intnews.it/en/logistics-tech-2026-warehouse-robots-drones-ai/)\n\n---\n\n## 25. Debian 13 Is Taking Over 2,200+ Control Systems Across CERN\n\n**Score:** `15/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 1-3 months \u00b7 **Effort:** Medium\n\n### The Gap\nScientific and industrial facilities running 2,000+ control systems face massive, recurring OS migration pain (CERN's Debian 13 rollout being the latest). There's no purpose-built platform that maps dependencies, validates control logic against new OS versions, and provides unified rollback across heterogeneous SCADA/accelerator/cryogenic stacks \u2014 they're stuck bolting together Ansible, custom scripts, and tribal knowledge. This decay recurs every 2-3 years per facility, with no good solution emerging from incumbents like Red Hat Satellite or Siemens.\n\n### Why Tardis Wins\nTardis can build a control-system lifecycle platform where Cloudflare Workers coordinate distributed rollouts and rollback from the edge, AI agents ingest config drift + CVE feeds + control logic to auto-generate and validate migration playbooks per subsystem, data pipelines stream real-time telemetry from each node for canary validation, and a knowledge graph models the 2,200+ asset dependency tree (e.g., 'if this PLC fails, which detector experiment breaks'). Incumbents optimize for enterprise servers \u2014 Tardis can own the niche where reliability requirements are CERN-grade but tooling is held together with duct tape.\n\n### Approach\nApproach CERN's controls group (IT-CS) and one industrial counterpart (a power utility or water authority mid-migration) as design partners, offering to ingest their asset inventory into a Tardis knowledge graph and run a parallel migration simulation. Package the first successful Debian 13 subsystem cutover as a public case study to seed demand across the ~50 large scientific facilities and several thousand critical-infrastructure operators worldwide.\n\n### Revenue Model\nPer-facility SaaS subscription ($50K-500K/yr depending on control-system count) plus premium AI agent add-ons for predictive migration planning and compliance reporting.\n\n### Risks\nScientific facilities move slowly on procurement, prefer open-source self-hosted solutions, and may view a Cloudflare-native platform as unsuitable for OT/air-gapped environments \u2014 would need an on-prem deployment story.\n\n**Source:** [https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/](https://linuxiac.com/debian-13-is-taking-over-2200-control-systems-across-cern/)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-03T23:05:17.862431+00:00_", "creation_timestamp": "2026-09-03T23:06:24.208920Z"}, {"uuid": "c80f91ad-5cec-4e58-9aa1-7e4a8d3e15e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-03T22:00:09.753268Z"}, {"uuid": "743d2b8f-193f-4d2e-85a7-69cf3f72bad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fib4rqqx4kk3b", "content": "CVE-2026-62916 - Microsoft Entra ID Elevation of Privilege Vulnerability\nCVE ID : CVE-2026-62916\n \n Published : Sept. 3, 2026, 10:59 p.m. | 20\u00a0minutes ago\n \n Description : None\n \n Severity: 9.1 | CRITICAL\n \n Visit the link for more details, such as CVSS details, affected produ...", "creation_timestamp": "2026-09-03T23:36:35.054152Z"}, {"uuid": "271b0293-7b6e-4122-9640-8904247e08a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "published-proof-of-concept", "source": "Telegram/YUSQnHRGPoy1hnFlMACvlx_l4ArB_dfPL6N2OZrh3RVUvk4", "content": "", "creation_timestamp": "2026-09-04T00:00:11.561384Z"}, {"uuid": "18aca3c8-401d-487e-bb60-8058c014e739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/100916", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62735\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-03 10:43:32\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWindows HTTP.sys integer overflow -> nonpaged pool overflow LPE PoC (CVE-2026-62735): crash + full SYSTEM exploit; for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-04T00:00:50.180651Z"}, {"uuid": "b62aff7a-1daa-4b35-ae12-0135be6879c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3munobcp2og2t", "content": "\ud83d\udea8 CVE-2026-62916 \u2014 CVSS 9.1 CRITICAL\n\nAuthentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attac...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62916\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T00:07:41.457582Z"}, {"uuid": "743e8bd4-9430-469c-9360-49f5c9fccb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3munsuoek5f22", "content": "CVE-2026-62916 - microsoft entra\nThe sign\u2011in service used by Microsoft Entra ID can be tricked through an alternative login route, allowing an unauthorized person to raise their permissions across\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#microsoftentra #microsoft #CVE #infosec", "creation_timestamp": "2026-09-04T01:30:06.060030Z"}, {"uuid": "5fc0e7b9-5d1e-48be-9556-b5e3d48bc1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62906", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3muo43ovisx2u", "content": "Microsoft Discovery Studio\u306e\u8106\u5f31\u6027\u306b\u3088\u308a\u3001\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u7d4c\u7531\u3067\u60c5\u5831\u6f0f\u6d29\u306e\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-62906 CVSS 7.4 | HIGH", "creation_timestamp": "2026-09-04T04:15:07.643942Z"}, {"uuid": "f2960dd3-f7cd-4833-9b83-19d4543d2f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://jvn.jp/en/jp/JVN32505330", "content": "", "creation_timestamp": "2026-09-04T04:46:23.613426Z"}, {"uuid": "39af9e2c-ab52-4459-9d84-f50f031e7e57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muohk7syvb2m", "content": "CVE-2026-62928 - xing cptrans-me-x\nThe XING CPTrans-ME-X component can be tricked into executing operating system commands without requiring any login. This means an attacker could potentially take control of the server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#xing #CVE #infosec", "creation_timestamp": "2026-09-04T07:40:04.216597Z"}, {"uuid": "02cc9ea9-e396-4709-9c41-9f34b31fc7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muoipb4jyl2v", "content": "\ud83d\udd34 CVE-2026-62928 - Critical (9.8)\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be in...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62928/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-04T08:00:47.475260Z"}, {"uuid": "04f2c610-c84c-481f-b299-2a515980d318", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62928", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muoj3uaetz22", "content": "\ud83d\udea8 CVE-2026-62928 \u2014 CVSS 9.3 CRITICAL\n\nXING CPTrans-ME-X contains an OS Command Injection (CWE-78). Unauthenticated OS command may be injected.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62928\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-04T08:07:49.352799Z"}, {"uuid": "149338ed-fe8a-41ab-aa6f-6ed225b18310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3880", "content": "\u2615 CYBERBRIEFING MATTUTINO \u2014 Venerd\u00ec 4 settembre 2026\n\n\u2615 CYBERBRIEFING MATTUTINO \u2014 Venerd\u00ec 4 settembre 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \u26a0 IN PRIMO PIANO Una vulnerabilit\u00e0 critica di autenticazione in Microsoft Exchange Server (CVE-2026-62911, CVSS 8.0) \u00e8 ora sfruttata attivamente: un exploit funzionante circola \u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-09-04", "creation_timestamp": "2026-09-04T11:00:05.439086Z"}, {"uuid": "f414abd3-0fb8-4325-b18c-2cb2fb516707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3muoyefgrzj2t", "content": "@zscalerinc.bsky.social\nPublic exploit code targets unpatched Exchange; patch now and remove internet exposure.\n-\nIOCs: CVE-2026-62911\n-\n#CVE-2026-62911 #Exchange #ThreatIntel", "creation_timestamp": "2026-09-04T12:41:03.135697Z"}, {"uuid": "e0b88adf-f79e-434f-a636-3d6a67e3f71c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mupf5yz5ou23", "content": "\ud83d\udce2 CVE-2026-62911 : vuln\u00e9rabilit\u00e9 critique d'\u00e9l\u00e9vation de privil\u00e8ges dans Microsoft Exchange avec PoC public\n\n\ud83d\udcf0 Source : LeMagIT \u2014 Article publi\u00e9 le 26 ao\u00fbt 2026, relatant une vuln\u00e9rabilit\u00e9 Exchange divulgu\u00e9e lors du Patch\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#MicrosoftExchange #PoCPublic #Cyberveille", "creation_timestamp": "2026-09-04T16:30:15.866530Z"}, {"uuid": "a48cbf49-d59d-4c9b-9655-9fce328b861b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/14822", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-09-04T17:00:05.638476Z"}, {"uuid": "ddf66f69-1ac0-4e6d-b213-72315ca90f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/15461", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-04T17:00:05.781081Z"}, {"uuid": "43af6d1e-55d3-4381-9a2c-4bc627111189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/thinkronicity.ispost.ing/post/3mupsfnoakc2j", "content": "\"But HIS emails.\"\n\n21,899 MS Exchange servers still exposed and unpatched for high-severity auth-bypass. #CVE-2026-62911\nThe 'rouge' #OpenAI agents story and more.\n#Cyber #OpSec #RedTeam #BlueTeam #CyberSecurity \n#AIHacking\nyoutu.be/6AbZlAoU82o?...", "creation_timestamp": "2026-09-04T20:27:04.007502Z"}, {"uuid": "f6d83feb-8fb1-4a62-87e1-24320e54cb6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6267", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mupwfz5eck2b", "content": "\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u300cGitLab\u300d\u3001\u8106\u5f31\u602713\u4ef6\u3092\u4fee\u6b63\n\nGitLab\u306f\u3001\u958b\u767a\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u300cGitLab 19.2.1\u300d\u300c\u540c19.1.3\u300d\u300c\u540c19.0.5\u300d\u3092\u30ea\u30ea\u30fc\u30b9\u3057\u305f\u3002\u6700\u65b0\u30d0\u30fc\u30b8\u30e7\u30f3\u3078\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u5f37\u304f\u63a8\u5968\u3057\u3066\u3044\u308b\u3002\n\n...\n\n\u300cCVE-2026-6267\u300d\u306f\u3001\u300cWorkhorse\u300d\u306e\u5185\u90e8\u30ea\u30af\u30a8\u30b9\u30c8\u51e6\u7406\u306b\u304a\u3044\u3066\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u3053\u3068\u306b\u8d77\u56e0\u3059\u308b\u8106\u5f31\u6027\u3002\u7279\u5b9a\u306e\u6761\u4ef6\u4e0b\u3067\u958b\u767a\u8005\u30ed\u30fc\u30eb\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u304c\u672c\u6765\u30a2\u30af\u30bb\u30b9\u6a29\u9650\u306e\u306a\u3044\u60c5\u5831\u3078\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3053\u3068\u304c\u53ef\u80fd\u3068\u306a\u308b\u3002", "creation_timestamp": "2026-09-04T21:38:48.538629Z"}, {"uuid": "9f45e973-dad5-4da8-b5f6-6454d9de0f1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/a9597ee58206159d6c49cf04ea9e43fb", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-04\n\n**Run time:** 2026-09-04T23:04:24.994986+00:00\n**Ideas cleared 15/25:** 30\n\n## 1. America's energy sector needs 500,000 more workers by 2030 thanks to AI\u2014robots may have to step in | Fortune\n\n**Score:** `20/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAmerica's energy sector needs 500,000 more workers by 2030 thanks to AI\u2014robots may have to step in | Fortune\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://fortune.com/2026/08/24/americas-energy-sector-needs-500000-more-workers-by-2030-thanks-to-ai-unless-more-workers-retrain-humanoid-robots-step-in/](https://fortune.com/2026/08/24/americas-energy-sector-needs-500000-more-workers-by-2030-thanks-to-ai-unless-more-workers-retrain-humanoid-robots-step-in/)\n\n---\n\n## 2. Odisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n**Score:** `19/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nOdisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza](https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza)\n\n---\n\n## 3. 'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960](https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960)\n\n---\n\n## 4. Tinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/](https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/)\n\n---\n\n## 5. Bessent's Treasury Move Is Fueling the Carry Trade. Emerging Markets Are Preparing for a 'Wall of Money.' | IBTimes\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBessent's Treasury Move Is Fueling the Carry Trade. Emerging Markets Are Preparing for a 'Wall of Money.' | IBTimes\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.ibtimes.com/bessents-treasury-move-fueling-carry-trade-emerging-markets-are-preparing-wall-money-3807043](https://www.ibtimes.com/bessents-treasury-move-fueling-carry-trade-emerging-markets-are-preparing-wall-money-3807043)\n\n---\n\n## 6. ED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece](https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece)\n\n---\n\n## 7. 'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.webindia123.com/news/articles/India/20260903/4494137.html](https://news.webindia123.com/news/articles/India/20260903/4494137.html)\n\n---\n\n## 8. ED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html](https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html)\n\n---\n\n## 9. Bau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/](https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/)\n\n---\n\n## 10. Diduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDiduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/](https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/)\n\n---\n\n## 11. DRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/](https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/)\n\n---\n\n## 12. 'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn](https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn)\n\n---\n\n## 13. India Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndia Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/](https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/)\n\n---\n\n## 14. 35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify](https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify)\n\n---\n\n## 15. Capacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCapacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/](https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/)\n\n---\n\n## 16. FG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/](https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/)\n\n---\n\n## 17. CAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02](https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02)\n\n---\n\n## 18. DSV struggles with integration of Schenker network - Supply Chain Movement\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDSV struggles with integration of Schenker network - Supply Chain Movement\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/](https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/)\n\n---\n\n## 19. The freight recession is over. Is your supply chain ready? | AlixPartners\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe freight recession is over. Is your supply chain ready? | AlixPartners\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/](https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/)\n\n---\n\n## 20. CERN moves thousands of accelerator control computers to Debian | LavX News\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian | LavX News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian](https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian)\n\n---\n\n## 21. CERN moves thousands of accelerator control computers to Debian\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312](https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312)\n\n---\n\n## 22. CVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/](https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/)\n\n---\n\n## 23. Energy IS the New Currency: Power, Compute and the AI Loop \u2014 Live Trading News\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnergy IS the New Currency: Power, Compute and the AI Loop \u2014 Live Trading News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.livetradingnews.com/energy-is-the-new-currency](https://www.livetradingnews.com/energy-is-the-new-currency)\n\n---\n\n## 24. NextEra, Santee Cooper Point to Real Dollar Savings From AI Deployments\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nNextEra, Santee Cooper Point to Real Dollar Savings From AI Deployments\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.powermag.com/nextera-santee-cooper-point-to-real-dollar-savings-from-ai-deployments/](https://www.powermag.com/nextera-santee-cooper-point-to-real-dollar-savings-from-ai-deployments/)\n\n---\n\n## 25. From vision to reality: a unified AI solver for the grid - IBM Research\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFrom vision to reality: a unified AI solver for the grid - IBM Research\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://research.ibm.com/blog/gridfm-neural-solver-power-grid](https://research.ibm.com/blog/gridfm-neural-solver-power-grid)\n\n---\n\n## 26. From vision to reality: A unified neural solver for the power grid\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFrom vision to reality: A unified neural solver for the power grid\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://techxplore.com/news/2026-08-vision-reality-neural-solver-power.html](https://techxplore.com/news/2026-08-vision-reality-neural-solver-power.html)\n\n---\n\n## 27. CrowdStrike put OpenAI in the product and Anthropic at the checkout\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCrowdStrike put OpenAI in the product and Anthropic at the checkout\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://thenextweb.com/news/crowdstrike-openai-gpt-5-6-cyber-anthropic-claude-marketplace](https://thenextweb.com/news/crowdstrike-openai-gpt-5-6-cyber-anthropic-claude-marketplace)\n\n---\n\n## 28. Energy firms face AI-enhanced cyber attacks in connectivity push | Reuters\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnergy firms face AI-enhanced cyber attacks in connectivity push | Reuters\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.reuters.com/business/energy/energy-firms-face-ai-enhanced-cyber-attacks-connectivity-push--reeii-2026-09-01/](https://www.reuters.com/business/energy/energy-firms-face-ai-enhanced-cyber-attacks-connectivity-push--reeii-2026-09-01/)\n\n---\n\n## 29. How Chevron became the AI darling of Big Oil \u2013 DNYUZ\n\n**Score:** `15/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nHow Chevron became the AI darling of Big Oil \u2013 DNYUZ\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://dnyuz.com/2026/08/08/how-chevron-became-the-ai-darling-of-big-oil/](https://dnyuz.com/2026/08/08/how-chevron-became-the-ai-darling-of-big-oil/)\n\n---\n\n## 30. Base Power Company: Chapter 3\n\n**Score:** `15/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBase Power Company: Chapter 3\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.notboring.co/p/base-power-company-chapter-3](https://www.notboring.co/p/base-power-company-chapter-3)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-04T23:04:24.995415+00:00_", "creation_timestamp": "2026-09-04T23:05:16.401884Z"}, {"uuid": "f7db508f-7c67-4e5b-b4ae-1f1a213d7887", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/a9597ee58206159d6c49cf04ea9e43fb", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-04\n\n**Run time:** 2026-09-04T23:04:24.994986+00:00\n**Ideas cleared 15/25:** 30\n\n## 1. America's energy sector needs 500,000 more workers by 2030 thanks to AI\u2014robots may have to step in | Fortune\n\n**Score:** `20/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nAmerica's energy sector needs 500,000 more workers by 2030 thanks to AI\u2014robots may have to step in | Fortune\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://fortune.com/2026/08/24/americas-energy-sector-needs-500000-more-workers-by-2030-thanks-to-ai-unless-more-workers-retrain-humanoid-robots-step-in/](https://fortune.com/2026/08/24/americas-energy-sector-needs-500000-more-workers-by-2030-thanks-to-ai-unless-more-workers-retrain-humanoid-robots-step-in/)\n\n---\n\n## 2. Odisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n**Score:** `19/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nOdisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza](https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza)\n\n---\n\n## 3. 'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960](https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960)\n\n---\n\n## 4. Tinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/](https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/)\n\n---\n\n## 5. Bessent's Treasury Move Is Fueling the Carry Trade. Emerging Markets Are Preparing for a 'Wall of Money.' | IBTimes\n\n**Score:** `18/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBessent's Treasury Move Is Fueling the Carry Trade. Emerging Markets Are Preparing for a 'Wall of Money.' | IBTimes\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.ibtimes.com/bessents-treasury-move-fueling-carry-trade-emerging-markets-are-preparing-wall-money-3807043](https://www.ibtimes.com/bessents-treasury-move-fueling-carry-trade-emerging-markets-are-preparing-wall-money-3807043)\n\n---\n\n## 6. ED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece](https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece)\n\n---\n\n## 7. 'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.webindia123.com/news/articles/India/20260903/4494137.html](https://news.webindia123.com/news/articles/India/20260903/4494137.html)\n\n---\n\n## 8. ED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html](https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html)\n\n---\n\n## 9. Bau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/](https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/)\n\n---\n\n## 10. Diduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDiduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/](https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/)\n\n---\n\n## 11. DRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/](https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/)\n\n---\n\n## 12. 'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn](https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn)\n\n---\n\n## 13. India Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndia Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/](https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/)\n\n---\n\n## 14. 35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify](https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify)\n\n---\n\n## 15. Capacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCapacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/](https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/)\n\n---\n\n## 16. FG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/](https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/)\n\n---\n\n## 17. CAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02](https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02)\n\n---\n\n## 18. DSV struggles with integration of Schenker network - Supply Chain Movement\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDSV struggles with integration of Schenker network - Supply Chain Movement\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/](https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/)\n\n---\n\n## 19. The freight recession is over. Is your supply chain ready? | AlixPartners\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe freight recession is over. Is your supply chain ready? | AlixPartners\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/](https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/)\n\n---\n\n## 20. CERN moves thousands of accelerator control computers to Debian | LavX News\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian | LavX News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian](https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian)\n\n---\n\n## 21. CERN moves thousands of accelerator control computers to Debian\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312](https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312)\n\n---\n\n## 22. CVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/](https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/)\n\n---\n\n## 23. Energy IS the New Currency: Power, Compute and the AI Loop \u2014 Live Trading News\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnergy IS the New Currency: Power, Compute and the AI Loop \u2014 Live Trading News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.livetradingnews.com/energy-is-the-new-currency](https://www.livetradingnews.com/energy-is-the-new-currency)\n\n---\n\n## 24. NextEra, Santee Cooper Point to Real Dollar Savings From AI Deployments\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nNextEra, Santee Cooper Point to Real Dollar Savings From AI Deployments\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.powermag.com/nextera-santee-cooper-point-to-real-dollar-savings-from-ai-deployments/](https://www.powermag.com/nextera-santee-cooper-point-to-real-dollar-savings-from-ai-deployments/)\n\n---\n\n## 25. From vision to reality: a unified AI solver for the grid - IBM Research\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFrom vision to reality: a unified AI solver for the grid - IBM Research\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://research.ibm.com/blog/gridfm-neural-solver-power-grid](https://research.ibm.com/blog/gridfm-neural-solver-power-grid)\n\n---\n\n## 26. From vision to reality: A unified neural solver for the power grid\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFrom vision to reality: A unified neural solver for the power grid\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://techxplore.com/news/2026-08-vision-reality-neural-solver-power.html](https://techxplore.com/news/2026-08-vision-reality-neural-solver-power.html)\n\n---\n\n## 27. CrowdStrike put OpenAI in the product and Anthropic at the checkout\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCrowdStrike put OpenAI in the product and Anthropic at the checkout\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://thenextweb.com/news/crowdstrike-openai-gpt-5-6-cyber-anthropic-claude-marketplace](https://thenextweb.com/news/crowdstrike-openai-gpt-5-6-cyber-anthropic-claude-marketplace)\n\n---\n\n## 28. Energy firms face AI-enhanced cyber attacks in connectivity push | Reuters\n\n**Score:** `16/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nEnergy firms face AI-enhanced cyber attacks in connectivity push | Reuters\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.reuters.com/business/energy/energy-firms-face-ai-enhanced-cyber-attacks-connectivity-push--reeii-2026-09-01/](https://www.reuters.com/business/energy/energy-firms-face-ai-enhanced-cyber-attacks-connectivity-push--reeii-2026-09-01/)\n\n---\n\n## 29. How Chevron became the AI darling of Big Oil \u2013 DNYUZ\n\n**Score:** `15/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nHow Chevron became the AI darling of Big Oil \u2013 DNYUZ\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://dnyuz.com/2026/08/08/how-chevron-became-the-ai-darling-of-big-oil/](https://dnyuz.com/2026/08/08/how-chevron-became-the-ai-darling-of-big-oil/)\n\n---\n\n## 30. Base Power Company: Chapter 3\n\n**Score:** `15/25` \u00b7 **Type:** Collision Detector \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBase Power Company: Chapter 3\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.notboring.co/p/base-power-company-chapter-3](https://www.notboring.co/p/base-power-company-chapter-3)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-04T23:04:24.995415+00:00_", "creation_timestamp": "2026-09-05T00:01:05.926311Z"}, {"uuid": "fc461b37-142c-4986-b1e4-936c9315740a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6279", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/14822", "content": "CVE-2026-6279 \u2013 kitploit.com\n\nSat, 22 Aug 2026 13:07:25", "creation_timestamp": "2026-09-05T01:00:21.627225Z"}, {"uuid": "d3c0bb87-db3d-4351-80aa-c9804fff273f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/15461", "content": "PoC Released for Microsoft Exchange CVE-2026-62911 Pre-Auth RCE Attack Chain \u2013 gbhackers.com\n\nTue, 01 Sep 2026 14:24:56", "creation_timestamp": "2026-09-05T01:00:21.749003Z"}, {"uuid": "203e083a-b3aa-4569-bc5b-9ce6efe3183c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "exploited", "source": "https://t.me/infosec_ita_notizie/3880", "content": "\u2615 CYBERBRIEFING MATTUTINO \u2014 Venerd\u00ec 4 settembre 2026\n\n\u2615 CYBERBRIEFING MATTUTINO \u2014 Venerd\u00ec 4 settembre 2026 Il tuo riassunto quotidiano di cybersecurity da leggere con il caff\u00e8. \u26a0 IN PRIMO PIANO Una vulnerabilit\u00e0 critica di autenticazione in Microsoft Exchange Server (CVE-2026-62911, CVSS 8.0) \u00e8 ora sfruttata attivamente: un exploit funzionante circola \u2026\n\n\n\ud83d\udc49Leggi tutti gli aggiornamenti delle ultime 24 ore: https://ilpuntocyber.rfeed.it/article.php?s=2026-09-04", "creation_timestamp": "2026-09-05T01:00:32.288443Z"}, {"uuid": "15f9d3ed-645e-4a0c-a018-31a0f3c33203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/985628f1ffc7131413833438ac412990", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-05\n\n**Run time:** 2026-09-05T02:06:50.547603+00:00\n**Ideas cleared 15/25:** 30\n\n## 1. Odisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n**Score:** `19/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nOdisha: Power Sector Needs CAG Scrutiny Into \u2018Huge Capex Extravaganza\u2019 | NewsClick\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza](https://www.newsclick.in/odisha-power-sector-needs-cag-scrutiny-huge-capex-extravaganza)\n\n---\n\n## 2. 'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960](https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960)\n\n---\n\n## 3. Tinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/](https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/)\n\n---\n\n## 4. Irregularities Take Centre Stage as Parliamentary Committee Inspects Doho Irrigation Schemes in Butaleja - Nile Chronicles News, NCN\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIrregularities Take Centre Stage as Parliamentary Committee Inspects Doho Irrigation Schemes in Butaleja - Nile Chronicles News, NCN\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://nilechronicles.com/irregularities-take-centre-stage-as-parliamentary-committee-inspects-doho-irrigation-schemes-in-butaleja](https://nilechronicles.com/irregularities-take-centre-stage-as-parliamentary-committee-inspects-doho-irrigation-schemes-in-butaleja)\n\n---\n\n## 5. The Food That Was Supposed To Be Destroyed. Inside India\u2019s Growing Business Of Fake Dates, Fake Labels And Real Profits - The \u20b975-Lakh Warehouse And The Business Behind It - Inventiva\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe Food That Was Supposed To Be Destroyed. Inside India\u2019s Growing Business Of Fake Dates, Fake Labels And Real Profits - The \u20b975-Lakh Warehouse And The Business Behind It - Inventiva\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.inventiva.co.in/trends/the-food-that-was-supposed-to-be-destroyed-inside-indias-growing-business-of-fake-dates-fake-labels-and-real-profits-the-%e2%82%b975-lakh-warehouse-and-the-business-behind-it/](https://www.inventiva.co.in/trends/the-food-that-was-supposed-to-be-destroyed-inside-indias-growing-business-of-fake-dates-fake-labels-and-real-profits-the-%e2%82%b975-lakh-warehouse-and-the-business-behind-it/)\n\n---\n\n## 6. ROAD COMPENSATION MAFIA! Works Ministry Officials Arrested Over Sh430Bn Nateete-Nakawuka Rd Scandal \u2014 Sh35m Acre Turned Sh2Bn - ONLINE\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nROAD COMPENSATION MAFIA! Works Ministry Officials Arrested Over Sh430Bn Nateete-Nakawuka Rd Scandal \u2014 Sh35m Acre Turned Sh2Bn - ONLINE\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://redpepper.co.ug/road-compensation-mafia-works-ministry-officials-arrested-over-sh430bn-nateete-nakawuka-rd-scandal-sh35m-acre-turned-sh2bn/150742/](https://redpepper.co.ug/road-compensation-mafia-works-ministry-officials-arrested-over-sh430bn-nateete-nakawuka-rd-scandal-sh35m-acre-turned-sh2bn/150742/)\n\n---\n\n## 7. Tembisa Hospital: SIU uncovers R600m allegedly siphoned by Govindraju syndicate | African News Agency\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTembisa Hospital: SIU uncovers R600m allegedly siphoned by Govindraju syndicate | African News Agency\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://africannewsagency.com/tembisa-hospital-siu-uncovers-r600m-allegedly-siphoned-by-govindraju-syndicate/](https://africannewsagency.com/tembisa-hospital-siu-uncovers-r600m-allegedly-siphoned-by-govindraju-syndicate/)\n\n---\n\n## 8. Government Cracks Down on Ayushman Bharat-Pradhan Mantri Jan Arogya Yojana Fraud: 2,359 Hospitals Affected | TAX CONCEPT\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nGovernment Cracks Down on Ayushman Bharat-Pradhan Mantri Jan Arogya Yojana Fraud: 2,359 Hospitals Affected | TAX CONCEPT\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://taxconcept.net/_newspack_health/government-cracks-down-on-ayushman-bharat-pradhan-mantri-jan-arogya-yojana-fraud-2359-hospitals-affected/](https://taxconcept.net/_newspack_health/government-cracks-down-on-ayushman-bharat-pradhan-mantri-jan-arogya-yojana-fraud-2359-hospitals-affected/)\n\n---\n\n## 9. ED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED conducts searches across T.N., Keralam, Karnataka, Telangana in eight cases linked to drug trafficking - The Hindu\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece](https://www.thehindu.com/news/national/ed-conducts-searches-across-tn-keralam-karnataka-telangana-in-eight-cases-linked-to-drug-trafficking/article71423075.ece)\n\n---\n\n## 10. 'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Nasha Mukt Bharat': ED's massive hunt at 30 premises across Keralam, Karnataka, Tamil Nadu, Telangana\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.webindia123.com/news/articles/India/20260903/4494137.html](https://news.webindia123.com/news/articles/India/20260903/4494137.html)\n\n---\n\n## 11. ED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nED raids multiple locations in Kerala in \u20b918-crore hybrid ganja, Muscat MDMA smuggling cases | Kerala News | Onmanorama\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html](https://www.onmanorama.com/news/kerala/2026/09/03/ed-raids-multiple-locations-in-kerala-in-hybrid-ganja-muscat-mdma-smuggling-cases.html)\n\n---\n\n## 12. Bau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nBau Menyengat Proyek Irigasi Rp22,7 M Sambas: Pohon Hidup Ditembok, Jurnalis Dilawan - detikreportase.com\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/](https://detikreportase.com/bau-menyengat-proyek-irigasi-rp227-m-sambas-pohon-hidup-ditembok-jurnalis-dilawan/)\n\n---\n\n## 13. Diduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDiduga Asal Jadi Proyek Irigasi Rp22,7 Miliar di Tebas Sarat Kejanggalan Teknis - Berita Investigasi\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/](https://beritainvestigasi.com/diduga-asal-jadi-proyek-irigasi-rp227-miliar-di-tebas-sarat-kejanggalan-teknis/)\n\n---\n\n## 14. DRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDRI Busts Major SAFTA Fraud Network in Areca Nut Imports, Revenue Loss Estimated at \u20b92,500 Crore - IBG News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/](https://ibgnews.com/2026/08/16/dri-busts-major-safta-fraud-network-in-areca-nut-imports-revenue-loss-estimated-at-%e2%82%b92500-crore/)\n\n---\n\n## 15. 'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Happy You Are Recovering': Chhattisgarh Cop Dies, But Ayushman System Says He Is Returning Home | Asianet Newsable\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn](https://newsable.asianetnews.com/india/chhattisgarh-cop-dies-but-ayushman-system-says-he-is-recovering-dev-narayan-ram-wife-seema-kujur-seeks-action-articleshow-wu9hpgn)\n\n---\n\n## 16. India Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndia Turns To Egypt And 2 Other African Countries For 1.1 Million Tonnes Of Urea As Its Subsidy Bill Nears $37 Billion\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/](https://www.africanewseye.com/india-turns-to-egypt-and-2-other-african-countries-for-1-1-million-tonnes-of-urea-as-its-subsidy-bill-nears-37-billion/)\n\n---\n\n## 17. 35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify](https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify)\n\n---\n\n## 18. Capacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCapacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/](https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/)\n\n---\n\n## 19. FG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/](https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/)\n\n---\n\n## 20. A \u2018leading\u2019 Chinese miner of Mozambique\u2019s heavy sands linked to environmental destruction\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nA \u2018leading\u2019 Chinese miner of Mozambique\u2019s heavy sands linked to environmental destruction\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.mongabay.com/2026/08/a-leading-chinese-miner-of-mozambiques-heavy-sands-linked-to-environmental-destruction/](https://news.mongabay.com/2026/08/a-leading-chinese-miner-of-mozambiques-heavy-sands-linked-to-environmental-destruction/)\n\n---\n\n## 21. Parimatch money laundering case: ED raids 17 locations, freezes Rs 37 crore - India Today\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nParimatch money laundering case: ED raids 17 locations, freezes Rs 37 crore - India Today\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.indiatoday.in/india/story/parimatch-money-laundering-case-ed-raids-17-locations-freezes-rs-37-crore-2986735-2026-09-04](https://www.indiatoday.in/india/story/parimatch-money-laundering-case-ed-raids-17-locations-freezes-rs-37-crore-2986735-2026-09-04)\n\n---\n\n## 22. Nigeria power sector loses N1.36tn (U$1bn) to revenue leakages \u2014 NERC - Africa Business Insight\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nNigeria power sector loses N1.36tn (U$1bn) to revenue leakages \u2014 NERC - Africa Business Insight\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://africabusinessinsight.com/nigeria-power-sector-loses-n1-36tn-u1bn/](https://africabusinessinsight.com/nigeria-power-sector-loses-n1-36tn-u1bn/)\n\n---\n\n## 23. India Secures 1.1 Million Tonnes Urea Import Deal with Egypt & Africa Amid Rising Subsidies\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndia Secures 1.1 Million Tonnes Urea Import Deal with Egypt & Africa Amid Rising Subsidies\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.mondialnews.com/2026/08/14/india-strikes-major-deal-to-import-1-1-million-tonnes-of-urea-from-egypt-and-african-partners-amid-rising-subsidy-costs/](https://www.mondialnews.com/2026/08/14/india-strikes-major-deal-to-import-1-1-million-tonnes-of-urea-from-egypt-and-african-partners-amid-rising-subsidy-costs/)\n\n---\n\n## 24. CAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCAG shows how Bengal school system under Trinamool Congress failed children - India Today\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02](https://www.indiatoday.in/india-today-insight/story/cag-shows-how-bengal-school-system-under-trinamool-congress-failed-children-2985501-2026-09-02)\n\n---\n\n## 25. DSV struggles with integration of Schenker network - Supply Chain Movement\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDSV struggles with integration of Schenker network - Supply Chain Movement\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/](https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/)\n\n---\n\n## 26. The freight recession is over. Is your supply chain ready? | AlixPartners\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe freight recession is over. Is your supply chain ready? | AlixPartners\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/](https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/)\n\n---\n\n## 27. CERN moves thousands of accelerator control computers to Debian | LavX News\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian | LavX News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian](https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian)\n\n---\n\n## 28. CERN moves thousands of accelerator control computers to Debian\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312](https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312)\n\n---\n\n## 29. CVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/](https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/)\n\n---\n\n## 30. Kano Spends \u20a6235.4m on Classrooms for School That Doesn't Exist | Pulse Nigeria\n\n**Score:** `16/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nKano Spends \u20a6235.4m on Classrooms for School That Doesn't Exist | Pulse Nigeria\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.pulse.ng/story/kano-classrooms-school-not-found-2026080713191987631](https://www.pulse.ng/story/kano-classrooms-school-not-found-2026080713191987631)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-05T02:06:50.548071+00:00_", "creation_timestamp": "2026-09-05T02:08:39.022036Z"}, {"uuid": "cd431346-077a-4bac-801d-dedf0b757c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62911", "type": "seen", "source": "https://gist.github.com/tardis-create/b8529de908922034a453a115d133376f", "content": "# \ud83c\udf19 Nidra \u2014 2026-09-05\n\n**Run time:** 2026-09-05T05:04:52.097075+00:00\n**Ideas cleared 15/25:** 30\n\n## 1. 'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960](https://www.theregister.com/security/2026/08/19/not-a-theoretical-risk-feds-warn-as-attackers-use-ai-made-code-to-hack-critical-infrastructure-controllers/5289960)\n\n---\n\n## 2. Tinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n**Score:** `18/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTinubu's Minister Umahi Orders Niger Bridge Fixed with Market Bolts, Endangers Lives of Nigerians - West Africa Weekly\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/](https://westafricaweekly.com/tinubus-minister-umahi-orders-niger-bridge-fixed-with-market-bolts-endangers-lives-of-nigerians/)\n\n---\n\n## 3. Irregularities Take Centre Stage as Parliamentary Committee Inspects Doho Irrigation Schemes in Butaleja - Nile Chronicles News, NCN\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIrregularities Take Centre Stage as Parliamentary Committee Inspects Doho Irrigation Schemes in Butaleja - Nile Chronicles News, NCN\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://nilechronicles.com/irregularities-take-centre-stage-as-parliamentary-committee-inspects-doho-irrigation-schemes-in-butaleja](https://nilechronicles.com/irregularities-take-centre-stage-as-parliamentary-committee-inspects-doho-irrigation-schemes-in-butaleja)\n\n---\n\n## 4. The Food That Was Supposed To Be Destroyed. Inside India\u2019s Growing Business Of Fake Dates, Fake Labels And Real Profits - The \u20b975-Lakh Warehouse And The Business Behind It - Inventiva\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe Food That Was Supposed To Be Destroyed. Inside India\u2019s Growing Business Of Fake Dates, Fake Labels And Real Profits - The \u20b975-Lakh Warehouse And The Business Behind It - Inventiva\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.inventiva.co.in/trends/the-food-that-was-supposed-to-be-destroyed-inside-indias-growing-business-of-fake-dates-fake-labels-and-real-profits-the-%e2%82%b975-lakh-warehouse-and-the-business-behind-it/](https://www.inventiva.co.in/trends/the-food-that-was-supposed-to-be-destroyed-inside-indias-growing-business-of-fake-dates-fake-labels-and-real-profits-the-%e2%82%b975-lakh-warehouse-and-the-business-behind-it/)\n\n---\n\n## 5. ROAD COMPENSATION MAFIA! Works Ministry Officials Arrested Over Sh430Bn Nateete-Nakawuka Rd Scandal \u2014 Sh35m Acre Turned Sh2Bn - ONLINE\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nROAD COMPENSATION MAFIA! Works Ministry Officials Arrested Over Sh430Bn Nateete-Nakawuka Rd Scandal \u2014 Sh35m Acre Turned Sh2Bn - ONLINE\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://redpepper.co.ug/road-compensation-mafia-works-ministry-officials-arrested-over-sh430bn-nateete-nakawuka-rd-scandal-sh35m-acre-turned-sh2bn/150742/](https://redpepper.co.ug/road-compensation-mafia-works-ministry-officials-arrested-over-sh430bn-nateete-nakawuka-rd-scandal-sh35m-acre-turned-sh2bn/150742/)\n\n---\n\n## 6. Tembisa Hospital: SIU uncovers R600m allegedly siphoned by Govindraju syndicate | African News Agency\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nTembisa Hospital: SIU uncovers R600m allegedly siphoned by Govindraju syndicate | African News Agency\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://africannewsagency.com/tembisa-hospital-siu-uncovers-r600m-allegedly-siphoned-by-govindraju-syndicate/](https://africannewsagency.com/tembisa-hospital-siu-uncovers-r600m-allegedly-siphoned-by-govindraju-syndicate/)\n\n---\n\n## 7. Government Cracks Down on Ayushman Bharat-Pradhan Mantri Jan Arogya Yojana Fraud: 2,359 Hospitals Affected | TAX CONCEPT\n\n**Score:** `18/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nGovernment Cracks Down on Ayushman Bharat-Pradhan Mantri Jan Arogya Yojana Fraud: 2,359 Hospitals Affected | TAX CONCEPT\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://taxconcept.net/_newspack_health/government-cracks-down-on-ayushman-bharat-pradhan-mantri-jan-arogya-yojana-fraud-2359-hospitals-affected/](https://taxconcept.net/_newspack_health/government-cracks-down-on-ayushman-bharat-pradhan-mantri-jan-arogya-yojana-fraud-2359-hospitals-affected/)\n\n---\n\n## 8. Thailand's SEC Tightens Crypto Rules, Forcing KYC on P2P Transfers and Self-Hosted Wallets | The Currency analytics\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThailand's SEC Tightens Crypto Rules, Forcing KYC on P2P Transfers and Self-Hosted Wallets | The Currency analytics\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://thecurrencyanalytics.com/crypto-exchanges/thailands-sec-tightens-crypto-rules-forcing-kyc-on-p2p-transfers-and-self-hosted-wallets-290368](https://thecurrencyanalytics.com/crypto-exchanges/thailands-sec-tightens-crypto-rules-forcing-kyc-on-p2p-transfers-and-self-hosted-wallets-290368)\n\n---\n\n## 9. Indonesia wants more sway over commodity prices - here\u2019s how its new exchange can win over market - CNA\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndonesia wants more sway over commodity prices - here\u2019s how its new exchange can win over market - CNA\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.channelnewsasia.com/asia/indonesia-commodity-exchange-nickel-palm-oil-coal-6333186](https://www.channelnewsasia.com/asia/indonesia-commodity-exchange-nickel-palm-oil-coal-6333186)\n\n---\n\n## 10. New Climate Rules Drive Zero-Carbon Industrial Park Investment Boom in Southeast Asia - Caixin Global\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nNew Climate Rules Drive Zero-Carbon Industrial Park Investment Boom in Southeast Asia - Caixin Global\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.caixinglobal.com/2026-09-04/new-climate-rules-drive-zero-carbon-industrial-park-investment-boom-in-southeast-asia-102481900.html](https://www.caixinglobal.com/2026-09-04/new-climate-rules-drive-zero-carbon-industrial-park-investment-boom-in-southeast-asia-102481900.html)\n\n---\n\n## 11. Europe\u2019s green-power importers discover that CBAM value is settled by the hour | Serbia SEE Energy Mining News\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nEurope\u2019s green-power importers discover that CBAM value is settled by the hour | Serbia SEE Energy Mining News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://serbia-energy.eu/europes-green-power-importers-discover-that-cbam-value-is-settled-by-the-hour/](https://serbia-energy.eu/europes-green-power-importers-discover-that-cbam-value-is-settled-by-the-hour/)\n\n---\n\n## 12. SEE power prices retreat as renewables rise, Hungary-Germany spread widens - Power Trading News Europe\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nSEE power prices retreat as renewables rise, Hungary-Germany spread widens - Power Trading News Europe\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://electricity.trade/see-power-prices-retreat-as-renewables-rise-hungary-germany-spread-widens/](https://electricity.trade/see-power-prices-retreat-as-renewables-rise-hungary-germany-spread-widens/)\n\n---\n\n## 13. Raiding Riau: the hidden costs of Singapore\u2019s \u2018clean\u2019 energy drive | Jom\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nRaiding Riau: the hidden costs of Singapore\u2019s \u2018clean\u2019 energy drive | Jom\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.jom.media/raiding-riau-the-costs-of-singapores-clean-energy-drive/](https://www.jom.media/raiding-riau-the-costs-of-singapores-clean-energy-drive/)\n\n---\n\n## 14. Cuba opens business ownership to emigrants: \u2018Who is going to buy what you are going to sell? How will you finance it?\u2019 | International | EL PA\u00cdS English\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCuba opens business ownership to emigrants: \u2018Who is going to buy what you are going to sell? How will you finance it?\u2019 | International | EL PA\u00cdS English\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://english.elpais.com/international/2026-09-04/cuba-opens-business-ownership-to-emigrants-who-is-going-to-buy-what-you-are-going-to-sell-how-will-you-finance-it.html](https://english.elpais.com/international/2026-09-04/cuba-opens-business-ownership-to-emigrants-who-is-going-to-buy-what-you-are-going-to-sell-how-will-you-finance-it.html)\n\n---\n\n## 15. China moves to raise insurer capital bar fivefold in biggest insurance law rewrite since 2015 | Insurance Business\n\n**Score:** `18/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nChina moves to raise insurer capital bar fivefold in biggest insurance law rewrite since 2015 | Insurance Business\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.insurancebusinessmag.com/us/news/breaking-news/china-moves-to-raise-insurer-capital-bar-fivefold-in-biggest-insurance-law-rewrite-since-2015-588797.aspx](https://www.insurancebusinessmag.com/us/news/breaking-news/china-moves-to-raise-insurer-capital-bar-fivefold-in-biggest-insurance-law-rewrite-since-2015-588797.aspx)\n\n---\n\n## 16. 35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\n35th Annual Study of Logistics and Transportation Trends: Trust, but verify - Logistics Management\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify](https://www.logisticsmgmt.com/article/35th_annual_study_of_logistics_and_transportation_trends_trust_but_verify)\n\n---\n\n## 17. Capacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCapacity fears as US drayage rates are buoyed by converging trends - The Loadstar\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/](https://theloadstar.com/capacity-fears-as-us-drayage-rates-are-buoyed-by-converging-trends/)\n\n---\n\n## 18. FG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n**Score:** `17/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nFG Orders Total Closure Of First Niger Bridge For Emergency Rehabilitation - 247 Ureports\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/](https://247ureports.com/2026/09/fg-orders-total-closure-of-first-niger-bridge-for-emergency-rehabilitation/)\n\n---\n\n## 19. A \u2018leading\u2019 Chinese miner of Mozambique\u2019s heavy sands linked to environmental destruction\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nA \u2018leading\u2019 Chinese miner of Mozambique\u2019s heavy sands linked to environmental destruction\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.mongabay.com/2026/08/a-leading-chinese-miner-of-mozambiques-heavy-sands-linked-to-environmental-destruction/](https://news.mongabay.com/2026/08/a-leading-chinese-miner-of-mozambiques-heavy-sands-linked-to-environmental-destruction/)\n\n---\n\n## 20. Parimatch money laundering case: ED raids 17 locations, freezes Rs 37 crore - India Today\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nParimatch money laundering case: ED raids 17 locations, freezes Rs 37 crore - India Today\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.indiatoday.in/india/story/parimatch-money-laundering-case-ed-raids-17-locations-freezes-rs-37-crore-2986735-2026-09-04](https://www.indiatoday.in/india/story/parimatch-money-laundering-case-ed-raids-17-locations-freezes-rs-37-crore-2986735-2026-09-04)\n\n---\n\n## 21. Nigeria power sector loses N1.36tn (U$1bn) to revenue leakages \u2014 NERC - Africa Business Insight\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nNigeria power sector loses N1.36tn (U$1bn) to revenue leakages \u2014 NERC - Africa Business Insight\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://africabusinessinsight.com/nigeria-power-sector-loses-n1-36tn-u1bn/](https://africabusinessinsight.com/nigeria-power-sector-loses-n1-36tn-u1bn/)\n\n---\n\n## 22. India Secures 1.1 Million Tonnes Urea Import Deal with Egypt & Africa Amid Rising Subsidies\n\n**Score:** `17/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndia Secures 1.1 Million Tonnes Urea Import Deal with Egypt & Africa Amid Rising Subsidies\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.mondialnews.com/2026/08/14/india-strikes-major-deal-to-import-1-1-million-tonnes-of-urea-from-egypt-and-african-partners-amid-rising-subsidy-costs/](https://www.mondialnews.com/2026/08/14/india-strikes-major-deal-to-import-1-1-million-tonnes-of-urea-from-egypt-and-african-partners-amid-rising-subsidy-costs/)\n\n---\n\n## 23. Indonesia's global commodities price-setting ambition risks backfiring - Markets - The Jakarta Post\n\n**Score:** `17/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nIndonesia's global commodities price-setting ambition risks backfiring - Markets - The Jakarta Post\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.thejakartapost.com/business/2026/09/03/indonesias-global-commodities-price-setting-ambition-risks-backfiring](https://www.thejakartapost.com/business/2026/09/03/indonesias-global-commodities-price-setting-ambition-risks-backfiring)\n\n---\n\n## 24. DSV struggles with integration of Schenker network - Supply Chain Movement\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nDSV struggles with integration of Schenker network - Supply Chain Movement\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/](https://www.supplychainmovement.com/dsv-struggles-with-integration-of-schenker-network/)\n\n---\n\n## 25. The freight recession is over. Is your supply chain ready? | AlixPartners\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe freight recession is over. Is your supply chain ready? | AlixPartners\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/](https://www.alixpartners.com/insights/102nznu/the-freight-recession-is-over-is-your-supply-chain-ready/)\n\n---\n\n## 26. CERN moves thousands of accelerator control computers to Debian | LavX News\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian | LavX News\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian](https://news.lavx.hu/article/cern-moves-thousands-of-accelerator-control-computers-to-debian)\n\n---\n\n## 27. CERN moves thousands of accelerator control computers to Debian\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCERN moves thousands of accelerator control computers to Debian\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312](https://www.theregister.com/os-platforms/2026/09/03/cern-moves-thousands-of-accelerator-control-computers-to-debian/5294312)\n\n---\n\n## 28. CVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n**Score:** `16/25` \u00b7 **Type:** Infrastructure Decay \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nCVE-2026-62911 Leaves 22,000 Exchange Servers Open as Exploit Code Spreads\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/](https://www.kobaran.com/cve-2026-62911-leaves-22000-exchange-servers-open-as-exploit-code-spreads/)\n\n---\n\n## 29. Kano Spends \u20a6235.4m on Classrooms for School That Doesn't Exist | Pulse Nigeria\n\n**Score:** `16/25` \u00b7 **Type:** Government Leakage Detection \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nKano Spends \u20a6235.4m on Classrooms for School That Doesn't Exist | Pulse Nigeria\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://www.pulse.ng/story/kano-classrooms-school-not-found-2026080713191987631](https://www.pulse.ng/story/kano-classrooms-school-not-found-2026080713191987631)\n\n---\n\n## 30. The carbon-competitive frontier: Who wins and who gets priced out\n\n**Score:** `16/25` \u00b7 **Type:** Regulatory Arbitrage \u00b7 **Window:** 3-12 months \u00b7 **Effort:** Medium\n\n### The Gap\nThe carbon-competitive frontier: Who wins and who gets priced out\n\n### Why Tardis Wins\nAligns with Tardis's AI automation and Cloudflare infrastructure.\n\n### Approach\nResearch further and prototype.\n\n**Source:** [https://economymiddleeast.com/news/the-carbon-competitive-frontier-who-wins-and-who-gets-priced-out/](https://economymiddleeast.com/news/the-carbon-competitive-frontier-who-wins-and-who-gets-priced-out/)\n\n---\n\n---\n_Generated by Nidra \ud83c\udf19 \u2014 2026-09-05T05:04:52.097447+00:00_", "creation_timestamp": "2026-09-05T05:06:17.250190Z"}, {"uuid": "1c37220d-b311-4e34-8d34-39803e2244a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62916", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mutypcxvzq2l", "content": "Microsoft Patches Entra ID CVSS 9.1 Auth Bypass https://0daynews.com/articles/2026-09-05-entra-id-cve-2026-62916-auth-bypass?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1076", "creation_timestamp": "2026-09-06T12:30:29.016573Z"}, {"uuid": "21d96883-b0f6-4aa4-9c99-6d36fa1b7c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3muuzoidf5k2p", "content": "Microsoft Exchange Server ievainojam\u012bba CVE\n\nMicrosoft Exchange Server CVE-2026-62911 is a critical vulnerability that poses significant risks to organizations' data security and integrity. The article correctly identifies this as an issue, but I would argue that it falls short in its presentati\u2026", "creation_timestamp": "2026-09-06T22:20:33.165316Z"}, {"uuid": "506c4d75-fbe8-42ea-8f8d-928fa147dc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62916", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3muveclfyp32l", "content": "Microsoft Patches Entra ID CVSS 9.1 Auth Bypass \u2014 A CVSS 9.1 auth bypass in Microsoft Entra ID lets unauthenticated attackers\u2026 https://0daynews.com/articles/2026-09-05-entra-id-cve-2026-62916-auth-bypass?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-1077", "creation_timestamp": "2026-09-07T01:30:44.591306Z"}, {"uuid": "af0c9fd7-7fab-4681-ac85-9ab531b31e6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6223", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117229881004981941", "content": "CRITICAL vuln: CVE-2026-6223 in Bah\u00e7elievler Municipality BiHayat App (v2.1.7+) enables authentication bypass via weak brute-force protections. No vendor fix yet. Assess and strengthen your controls. https://radar.offseq.com/threat/cve-2026-6223-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-bahelievler-e94a3e6ad304a991 #OffSeq #CVE20266223 #Infosec #AppSec", "creation_timestamp": "2026-09-07T13:00:26.904707Z"}, {"uuid": "67855ebf-a8c0-439a-a45c-a68d469650c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-6223", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muwktvxnox24", "content": "CVE-2026-6223: Bah\u00e7elievler BiHayat App (v2.1.7+) has a CRITICAL auth bypass flaw \u2014 improper brute-force protection. No patch yet. Tighten access controls and monitor logins. https://radar.offseq.com/threat/cve-2026-6223-cwe-307-improper-restriction-of-excessive-authentication-attempts-in-bahelie...", "creation_timestamp": "2026-09-07T13:00:28.973948Z"}, {"uuid": "6b2f27fb-59ea-4dca-8999-e7fcf41d5dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6223", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muwolhdjws2j", "content": "\ud83d\udea8 CVE-2026-6223 \u2014 CVSS 9.4 CRITICAL\n\nImproper restriction of excessive authentication attempts vulnerability in Bah\u00e7elievler Muncipality BiHayat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-6223\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-07T14:07:19.254199Z"}, {"uuid": "031ecc1d-1c05-4cac-a3f5-a311f3348366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62188", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3muwtlz3dha2p", "content": "\ud83d\udccc CVE-2026-62188 - OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which the Feishu permission tools could ig... https://www.cyberhub.blog/cves/CVE-2026-62188", "creation_timestamp": "2026-09-07T15:37:06.914021Z"}, {"uuid": "cb69b8fb-c791-4ace-8a72-1bf94fe4aec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3muxri3a7ya2x", "content": "A Windows HTTP.sys vulnerability, CVE-2026-62735 (CVSS 7.8), now has public details and a PoC. It escalates local users to SYSTEM. Patch now.\n\n#Windows #HTTPsys #CVE202662735 #PrivilegeEscalation #Pwn2Own #SYSTEM #Infosec #PoC", "creation_timestamp": "2026-09-08T00:31:47.467304Z"}, {"uuid": "eca08fd2-fa0a-4f3b-a2aa-9b9eacb026d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3muy7q2nte52y", "content": "Windows HTTP.sys CVE-2026-62735: PoC Exploit Released for Privilege Escalation Flaw\uff08Windows HTTP.sys\u306e\u6a29\u9650\u6607\u683c\u8106\u5f31\u6027\u3001CVE-2026-62735\u306ePoC Exploit\u304c\u516c\u958b\uff09 #SecurityOnline (Sep 7)\n\nsecurityonline.info/windows-http...", "creation_timestamp": "2026-09-08T04:46:47.643737Z"}, {"uuid": "65429243-cd9a-4abd-89ee-382f8f10877c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62906", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:01:10.286070Z"}, {"uuid": "1b68898b-b013-42ba-9bbd-cc059bd5f361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62645", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117234953398567351", "content": "CVE-2026-62645 (CRITICAL, CVSS 9.8) in Siemens Reyrolle 7SR5 <2.70 allows attackers to calculate session IDs and bypass authentication via web interface. Restrict access, check Siemens advisory for updates. https://radar.offseq.com/threat/cve-2026-62645-cwe-306-missing-authentication-for-critical-function-in-siemens-reyrolle-7sr5-698cd29283a49514 #OffSeq #ICS #Vuln #OTsec", "creation_timestamp": "2026-09-08T10:30:25.739797Z"}, {"uuid": "2a682768-94ed-418c-b5f2-391abc26b0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:01:11.140399Z"}, {"uuid": "ea5ed155-3b76-4072-87e4-0de97739d0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62645", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3muyswl5vct24", "content": "Siemens Reyrolle 7SR5 (<2.70) faces a CRITICAL auth bypass (CVE-2026-62645, CVSS 9.8). Restrict device access and monitor Siemens advisories for patches. \ud83d\udd12 https://radar.offseq.com/threat/cve-2026-62645-cwe-306-missing-authentication-for-critical-function-in-siemens-reyrolle-7sr5-698cd29283a49514...", "creation_timestamp": "2026-09-08T10:30:27.467030Z"}, {"uuid": "daf2f398-1e0f-401c-a819-c4d6ea923596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6223", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muz2qcabjj2j", "content": "CVE-2026-6223 - bihayat app\nThe BiHayat mobile app for Bah\u00e7elievler Municipality (versions 2.1.7 through 07092026) does not limit how many times a user can try to log in, letting an attacker get past the login\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#bihayatapp #CVE #infosec", "creation_timestamp": "2026-09-08T12:50:06.101569Z"}, {"uuid": "3b7a6644-a7de-4087-845e-fd5944d2bc2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62645", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjszhy2n2j", "content": "CVE-2026-62645\nAll Reyrolle 7SR5 systems older than version 2.70 expose information on their web page that lets someone work out current and past session numbers. An attacker could use this to skip the login step and access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-08T17:20:04.086546Z"}, {"uuid": "1309cdc0-6e16-4866-a41a-d524a32bae84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62646", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzjt2wa2x2n", "content": "CVE-2026-62646\nOlder versions of Reyrolle 7SR5 create session IDs that are easy to predict. An attacker could guess a valid session ID and log in without a password. Upgrade to version 2.70 or later, or apply the vendor's\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-08T17:20:05.299572Z"}, {"uuid": "09ea39c9-0f08-4cf9-8ff8-37af352d7bc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62647", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muzkewgsvo25", "content": "CVE-2026-62647\nAll Reyrolle 7SR5 devices before version 2.70 use a weak random number generator for things like session IDs. Because the numbers can be predicted, a remote attacker could guess a valid ID and pretend to be an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-08T17:30:04.723224Z"}, {"uuid": "cbc696d6-db3e-41f7-ab09-31753ace1ca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0347", "content": "", "creation_timestamp": "2026-09-08T20:15:25.299425Z"}, {"uuid": "63f9babc-b78e-4a1a-9dd8-358003c2eb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62744", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117236720846334726", "content": "There is a new vulnerability with elevated criticality in Microsoft Windows (CVE-2026-62744) https://vuldb.com/vuln/399951", "creation_timestamp": "2026-09-08T17:59:54.344691Z"}, {"uuid": "46c91db5-bfce-49a5-aa99-62b51f1cba44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/433", "content": "CVE-2026-62735\n\nWindows HTTP.sys Elevation of Privilege.\n\nBlog: https://hackmd.io/@nhh/Hy6Oem7_Me", "creation_timestamp": "2026-09-08T10:00:06.244488Z"}, {"uuid": "b5243b26-43cc-4fd3-b8e9-c31af4fc8a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62383", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-3hhw-38pf-pxj6", "content": "", "creation_timestamp": "2026-09-08T18:35:28.237018Z"}, {"uuid": "b889b516-9a1a-4d71-bf63-6459e07c0f09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62384", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-f833-7jw8-xwrv", "content": "", "creation_timestamp": "2026-09-08T18:35:30.696546Z"}, {"uuid": "c21aaa1f-2cd3-4085-93fe-c767977fd19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62385", "type": "published-proof-of-concept", "source": "https://github.com/nltk/nltk/security/advisories/GHSA-568f-pv23-39p4", "content": "", "creation_timestamp": "2026-09-08T18:35:32.923871Z"}, {"uuid": "4493307d-de20-48df-b2b9-b3ff2c76e77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62810", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:01:56.441654Z"}, {"uuid": "d3cbed03-e30d-4542-bfbe-9555c202b089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:01:59.284787Z"}, {"uuid": "7ab72f92-6b86-4280-89c6-2b939b1fc15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-62744", "type": "seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3muzslkgmy22i", "content": "CVE-2026-62744 scores 8.8.\n\nHeap-based buffer overflow in Windows Media Foundation.\n\u2022 Allows unauthorized remote code execution\n\u2022 Requires user to open crafted media file\n\nhttps://thecircuitry.to/article/microsoft-windows-media-foundation-cve-2026-62744-rated-high-severity-mtt2kbwy", "creation_timestamp": "2026-09-08T19:56:56.809681Z"}, {"uuid": "1ce9406f-3aa9-415f-9d47-b64fdc89c146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62645", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrn57bab2n", "content": "\ud83d\udea8 CVE-2026-62645 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Information is exposed through...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62645\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:07:17.373754Z"}, {"uuid": "8c5e4646-02d3-4dd9-9ab6-d0b52f6409b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62646", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrnfd32s2t", "content": "\ud83d\udea8 CVE-2026-62646 \u2014 CVSS 9.1 CRITICAL\n\nA vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A session identifier is genera...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62646\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:07:24.955217Z"}, {"uuid": "0e3a2753-54d8-4070-aca2-b2799e5e2e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62647", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muyrnnlyue2t", "content": "\ud83d\udea8 CVE-2026-62647 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A random number generator is u...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62647\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-08T10:07:33.788347Z"}, {"uuid": "c68e363b-11cc-4717-b220-0d7e090c80dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62744", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:03:35.899675Z"}, {"uuid": "f4d2f375-2a0b-4e3a-8853-5605c245ed96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62804", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:03:45.640349Z"}, {"uuid": "db225802-ca52-4adf-996e-f7e2bca39f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62801", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:03:03.848000Z"}, {"uuid": "b427dce2-807a-42ac-a4e6-ed3df3828dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62706", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:03:35.533023Z"}, {"uuid": "0d78519d-e51b-4dc3-83c0-da490328a4ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62762", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:04:21.172568Z"}, {"uuid": "c23efecf-1993-48b1-a96e-404286034504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62813", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:04:22.377476Z"}, {"uuid": "8a95f6fa-c2ee-44da-9659-3596bab1ce80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62694", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:06:37.292105Z"}, {"uuid": "9a46b116-f485-49e4-8b3a-cfadd5356d86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62759", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:07:21.444840Z"}, {"uuid": "47390be3-0471-4a97-beb0-68c87690bc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62697", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-08T22:08:11.302742Z"}, {"uuid": "9591d50d-3922-4129-85d8-908dcb3ee9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62714", "type": "seen", "source": "https://bsky.app/profile/windowsforum.com/post/3mv2a6hkkf226", "content": "CISA KEV: patch 2 exploited Windows priv-esc flaws. DHCP CVE-2026-62714/62720: Server 2012\u20132025. Win11 29661.1000 defaults IAKerb on. Outlook Mobile gets on-prem Exchange AD FS auth. Member reports KB5120998 trouble. +6 more stories, 2 replies, 28 members", "creation_timestamp": "2026-09-09T00:00:10.922094Z"}, {"uuid": "395419a3-eca9-4c10-80b4-a9bfb6e3dfce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62735", "type": "published-proof-of-concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/433", "content": "CVE-2026-62735\n\nWindows HTTP.sys Elevation of Privilege.\n\nBlog: https://hackmd.io/@nhh/Hy6Oem7_Me", "creation_timestamp": "2026-09-09T00:00:32.807691Z"}, {"uuid": "36ce61f5-adfa-4fe2-bfc2-0e2df428ff60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62906", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:01:04.629059Z"}, {"uuid": "b28ddc60-658d-4110-ab17-3b63cbf5b845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:01:05.624562Z"}, {"uuid": "c8c4cbc8-1a4e-4106-be4e-cd73a835e19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62706", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:03:26.608379Z"}, {"uuid": "6a73c46a-2341-4c65-94b7-bb171ab59104", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62762", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:04:11.933998Z"}, {"uuid": "9c5b17a0-e612-4fe4-a194-ed80095609e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0347", "content": "Microsoft heeft 4 kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk CVE-2026-69854 heeft een CVSS-score van 9,0. Een kwaadwillende die al over een geldige sessie beschikt, kan de kwetsbaarheid onder specifieke voorwaarden, zoals bepaalde protocolinstellingen of configuraties, misbruiken om zijn rechten binnen de applicatie te verhogen. Hierdoor kan de kwaadwillende toegang krijgen tot afgeschermde functionaliteiten of gegevens.\n\nDe kwetsbaarheid met kenmerk CVE-2026-62895 heeft een CVSS-score van 8,8. Een kwaadwillende kan een speciaal geprepareerde website hosten en een gebruiker ertoe verleiden deze te bezoeken. Vervolgens kan de kwaadwillende via verzoeken aan een kwetsbare lokaal draaiende service opdrachten uitvoeren met verhoogde rechten. Voor misbruik is geen authenticatie vereist, maar gebruikersinteractie is wel vereist. Succesvol misbruik kan leiden tot het verkrijgen van SYSTEM-rechten.\n\nDe kwetsbaarheid met kenmerk CVE-2026-77909 heeft een CVSS-score van 7,7. De kwetsbaarheid betreft onvoldoende beveiligde inloggegevens in Azure CycleCloud. Een geauthenticeerde kwaadwillende kan deze kwetsbaarheid via het netwerk misbruiken om informatie, waaronder inloggegevens, te verkrijgen.\n\n```\nSpring Cloud Azure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-69854 | 9,00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Arc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62895 | 8,80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-77909 | 7,70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\nAzure Resource Manager (ARM): \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-81961 | 9,90 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-09-09T04:00:46.186347Z"}, {"uuid": "83ce6fac-252b-46cb-8998-6a0e3f60e959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62804", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:03:38.014292Z"}, {"uuid": "9a14b256-2827-45f6-ab00-6eb25ec881bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62810", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:01:45.658229Z"}, {"uuid": "3178ee7c-a5c4-4c4f-b337-5981eac13649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:01:48.825779Z"}, {"uuid": "f8fdf62b-6524-4b2a-96af-1ffdb41abebf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62744", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:03:27.112704Z"}, {"uuid": "b1257275-d3a5-4b1f-ace1-9aa6a874334c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62801", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:02:54.735016Z"}, {"uuid": "565f13a4-6e39-4b11-86fb-377d636de3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62813", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:04:12.810592Z"}, {"uuid": "4547b33d-f76d-418e-b061-9bd317f67f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62697", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:06:49.821547Z"}, {"uuid": "bbc91fbd-b29a-4b25-b606-b4bdc6f74f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62759", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:06:31.656966Z"}, {"uuid": "9459c92f-d42f-4b8b-aafa-b4c2a18f0f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62694", "type": "seen", "source": "https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review", "content": "Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there\u2019s a phrase from my military days that comes to mind: embrace the suck. Take an extend break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you\u2019d rather watch the full video recap covering the entire release, you can check out the Patch Report webcast on our YouTube channel. It should be posted within a couple of hours after the release.\nAdobe Patches for September 2026\nFor the first part of the August release, Adobe released 10 bulletins addressing 172 unique CVEs in Adobe ColdFusion, Acrobat Reader, Commerce (two bulletins), Campaign Classic, Experience Manager, Photoshop, Illustrator, Animate, and Adobe Photoshop Mobile. A total of 22 of these were submitted through the ZDI program.\nHere\u2019s this month\u2019s overview table:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\nAdobe Patches for September 2026\n\n\n\n  \nAdobe Patches for September 2026\n  \n\n    \n      \n        Bulletin ID\n        Product\n        CVE Count\n        Highest Severity\n        Highest CVSS\n        Exploited\n        Deployment Priority\n      \n    \n    \n      \n        APSB26-146\n        Adobe Commerce\n        1\n        Critical\n        10.0\n        Yes\n        1\n      \n      \n        APSB26-142\n        Adobe Campaign Classic\n        1\n        Critical\n        10.0\n        No\n        1\n      \n      \n        APSB26-119\n        Adobe ColdFusion\n        9\n        Critical\n        9.9\n        No\n        1\n      \n      \n        APSB26-98\n        Adobe Experience Manager\n        107\n        Critical\n        9.9\n        No\n        2\n      \n      \n        APSB26-138\n        Adobe Commerce\n        8\n        Critical\n        9.3\n        No\n        2\n      \n      \n        APSB26-141\n        Adobe Acrobat and Reader\n        32\n        Critical\n        8.8\n        No\n        2\n      \n      \n        APSB26-130\n        Adobe Photoshop\n        8\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-131\n        Adobe Illustrator\n        3\n        Critical\n        8.6\n        No\n        3\n      \n      \n        APSB26-132\n        Adobe Animate\n        1\n        Critical\n        8.2\n        No\n        3\n      \n      \n        APSB26-136\n        Adobe Photoshop Mobile\n        2\n        Important\n        7.4\n        No\n        3\n      \n      \n        TOTAL\n        10 bulletins\n        172\n        \n        \n        \n        \n      \n    \n  \n  \nAPSB26-146 (Adobe Commerce) is an out-of-band advisory posted September 7, 2026 addressing CVE-2026-75650, a CVSS 10.0 template-engine injection that Adobe reports is being exploited in the wild. All other bulletins were released on Patch Tuesday, September 8, 2026. No public proof-of-concept is noted for any bulletin.\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \nClearly, the priority here is the Commerce bug currently under active attack. Campaign Classic and ColdFusion also clock in with a deployment priority of 1. The Acrobat Reader should also be a priority. It contains 32 CVEs, including many code execution bugs, and PDFs are a favorite of attackers. The Experience Manager has plenty of CVEs being patched and also rates a deployment priority of 2.\nBesides the one bug in Commerce, none of the other Adobe bugs receiving patches this month are listed as publicly known or under active attack at the time of release.\nMicrosoft Patches for September 2026\nIt\u2019s a new record release from Microsoft, but, again, that seems to be the new normal. As always, counting this beast is tricky, but I see 972 new CVEs rolling out from Redmond this month. As with last month, only a single CVE is listed as being under active attack, so that\u2019s something, I suppose. As for the products affected by this release, we have Windows and Windows components, Office and Office Components, Azure and Azure Components, .NET and Visual Studio, Active Directory, Copilot Studio, Dynamics, Edge (Chromium-based), DHCP Server and Client, DNS Server, Exchange Server, Teams for Android, OpenSSH, Remote Desktop Client and Server, Skype for Business, Biometric Service, SQL Server, Windows Hello, Xbox, and Defender. Along with the external and Chromium bugs being documented this month, this drives the total CVE count to a staggering 997. Of these new CVEs, 114 are rated Critical, with the rest being rated Important.\nTo provide a little historical context on how many CVEs have been patched by Microsoft this year, let\u2019s take a look at some year-over-year totals:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n\n    \n  \n    \n\n      \n\n      \n        \n\n          \n        \n        \n\n        \n          \n            \n              \n              \n          \n            \n                \n                \n                \n                \n                \n                \n                \n                \n\n            \n          \n        \n            \n          \n        \n\n        \n      \n        \n      \n\n    \n  \n\n\n  \n\n\n\n\n\n  \nOn the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate. On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. However, we have not seen a correlating spike in active exploits \u2013 yet.  \nAs always, we\u2019ll start with the bugs under active attack and move on from there.  \n-              CVE-2026-81963 - Windows Update Stack Elevation of Privilege VulnerabilityThis is the first bug being exploited in the wild, but we know little about how broadly that exploitation is. The bug itself is a privilege escalation in the Update Stack, which is worrisome, but I doubt the automatic update process itself is compromised. More likely is that this bug is being combined with a code execution bug to spread malware or ransomware. Patch this one quickly.\n-              CVE-2026-85880 - Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityThis is the other bug currently being exploited, and it is also a privilege escalation bug. These types of bugs must be triggered by the user, but they can hide within documents, PDFs, and other attachments. As with the Update Stack EoP, we don\u2019t know how widespread these exploits may be, so assume they are coming for you and patch quickly.\n-              CVE-2026-55007 - Microsoft Exchange Server Remote Code Execution VulnerabilityThere are several Exchange patches this month, but despite the CVSS rating, I find this one most important. A remote, unauthenticated attacker could get code execution on an affected Exchange server just by sending an email with a malicious Visio attachment. The code execution occurs when the server processes the mail \u2013 no need even for the Preview Pane. Microsoft states the exploit would be unreliable, but the attacker only needs to get it right once. Schedule your downtime and update your Exchange servers with haste.\n -              CVE-2026-80097 - Microsoft Authenticator Elevation of Privilege VulnerabilityThis is the worst type of privilege escalation as it uses a bug in the authentication system itself. An attacker would need to install a malicious app on an Android device, then convince a user to complete the authentication sequence. Once done, the attacker gets the auth tokens and can access resources as the affected user. If you have a large Android user base, best not to ignore this one.\n-              CVE-2026-69465 - Microsoft Office SharePoint Remote Code Execution VulnerabilityI count 17 different SharePoint bugs in this release, with four leading to code execution. On its own, this bug doesn\u2019t look like the worst, but SharePoint has been a popular target recently, and these are the types of bugs being used. An authenticated user can submit a page that bypasses a control-safety check, causing the affected server to load code from a filesystem under the attacker\u2019s control. If you have SharePoint servers accessible from the internet, test and deploy these updates quickly.\n-              CVE-2026-65669 - Microsoft SQL Server Elevation of Privilege VulnerabilitySpeaking of AI-assisted code audits, there are over 60 patches for SQL Server in the September release. This bug even has an AI component, as the attacker would need to convince a user to submit specially crafted instructions to SQL Copilot in SQL Server Management Studio. So there\u2019s the user interaction component, but if they succeed, the attacker could gain access to the database at the user\u2019s permission level. Patching SQL Server will not be trivial this month, so take your time with your testing and really guard those SQL Servers that may be connected to the Internet.\n-              CVE-2026-69525 - Remote Desktop Services Remote Code Execution VulnerabilityThis CVSS 9.8 bug allows remote, unauthenticated attackers to run arbitrary code on affected systems via a Use-After-Free bug. Microsoft notes it needs to be an \u201cin-network attacker\u201d, but the CVSS still says Network. Since many enterprises rely on RDP, I would treat this one seriously and test and deploy the patch soonest.\nSo where are the wormable bugs, you may ask? Well, quite frankly, there are too many to single out. I count 20 different patches that could all be classified as wormable.  In each of these cases, a remote, unauthenticated attacker could get arbitrary code execution on affected systems with no user interaction. While some might be more exploitable than others, having 20 of them in a single release is something else. These are the ones I found (presented in no particular order):\n\n\nCVE-2026-69510 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-69524 \u2013 Windows Active Directory Domain Services Remote Code Execution Vulnerability\n\nCVE-2026-69530 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-69579 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\n\nCVE-2026-69590 \u2013 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability\n\nCVE-2026-69595 \u2013 Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n\nCVE-2026-69730 \u2013 Windows DNS Server Remote Code Execution Vulnerability (SigRed\u2019s spiritual successor)\n\nCVE-2026-69858 \u2013 Windows DNS Server Remote Code Execution Vulnerability\n\nCVE-2026-72936 \u2013 Windows SMB Client Remote Code Execution Vulnerability\n\nCVE-2026-72979 \u2013 Windows DHCP Server Remote Code Execution Vulnerability\n\nCVE-2026-72981 \u2013 IP Helper Remote Code Execution Vulnerability\n\nCVE-2026-72982 \u2013 Windows Netlogon Remote Code Execution Vulnerability\n\nCVE-2026-72983 \u2013 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability\n\nCVE-2026-72987 \u2013 Windows DNS Remote Code Execution Vulnerability\n\nCVE-2026-73009 \u2013 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n\nCVE-2026-73010 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78444 \u2013 Microsoft Failover Cluster Remote Code Execution Vulnerability\n\nCVE-2026-78449 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-78450 \u2013 Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n\nCVE-2026-83997 \u2013 Windows Message Queuing Remote Code Execution Vulnerability\nHere\u2019s the full list of CVEs released by Microsoft for September 2026:\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n  \n\n\n  \n    \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n \n \n \n \n  CVE\n  Title\n  Severity\n  CVSS\n  Public\n  Exploited\n  Type\n \n \n  CVE-2026-85880\n  Windows Advanced Local\n  Procedure Call (ALPC) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-81963\n  Windows Update Stack\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  Yes\n  EoP\n \n \n  CVE-2026-70352 **\n  Azure AI Language\n  Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-69857 **\n  Azure Cosmos DB\n  Spoofing Vulnerability\n  Critical\n  8.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80098 **\n  Copilot Studio\n  Elevation of Privilege Vulnerability\n  Critical\n  9.3\n  No\n  No\n  EoP\n \n \n  CVE-2026-73006\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83941 **\n  Entra ID Elevation of\n  Privilege Vulnerability\n  Critical\n  9.9\n  No\n  No\n  EoP\n \n \n  CVE-2026-72986\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73018\n  Graphic Fonts Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73017\n  Graphics Kernel Remote\n  Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-58599\n  HEVC Video Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72981\n  IP Helper Remote Code\n  Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72983\n  Internet Connection\n  Sharing (ICS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83711 **\n  Microsoft Azure Active\n  Directory B2C Elevation of Privilege Vulnerability\n  Critical\n  10\n  No\n  No\n  EoP\n \n \n  CVE-2026-62906 **\n  Microsoft Discovery\n  Studio Information Disclosure Vulnerability\n  Critical\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-65772\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62916 **\n  Microsoft Entra ID\n  Elevation of Privilege Vulnerability\n  Critical\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-81948\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81949\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81950\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81951\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81953\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81959\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70178 **\n  Microsoft Fabric\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-73010\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78444\n  Microsoft Failover\n  Cluster Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78439\n  Microsoft Office\n  Graphics Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78520\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Critical\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78509\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78519\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-78525\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69678\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69767\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69797\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69285\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69632\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77898\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-78505\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65669\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Critical\n  9.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-67378\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67631\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67636\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67643\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70351\n  Microsoft WebP Image\n  Extension Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69601\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78510\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81952\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-65818 **\n  Power Automate\n  Elevation of Privilege Vulnerability\n  Critical\n  8.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69649\n  Raw Image Extension\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66302\n  Skype for Business\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69854\n  Spring Cloud Azure\n  Elevation of Privilege Vulnerability\n  Critical\n  9\n  No\n  No\n  EoP\n \n \n  CVE-2026-81355\n  Virtual Hard Disk\n  (VHD) Miniport Driver Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-81352\n  Web Media Extensions\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69874\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72958\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69845\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72979\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72987\n  Windows DNS Remote\n  Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69730\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69813\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69827\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69858\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-77505\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72954\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72957\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Critical\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77493\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81955\n  Windows Graphics\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69769\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69710\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69725\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69740\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69784\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69799\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69820\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69864\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81354\n  Windows Hello\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-72980\n  Windows Hello Security\n  Feature Bypass Vulnerability\n  Critical\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72961\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69603\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80083\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69499\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69860\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70296\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73013\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73023\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77495\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69676\n  Windows Kerberos\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69712\n  Windows Key\n  Distribution Center Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70203\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72960\n  Windows Media Player\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69579\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72982\n  Windows Netlogon\n  Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70586\n  Windows Paint Remote\n  Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69530\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78449\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-78450\n  Windows Reliable\n  Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability\n  Critical\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69518\n  Windows Remote Desktop\n  Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69590\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69852\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72950\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72959\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Critical\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69501\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69846\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69906\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-83939\n  Windows Secure Kernel\n  Mode Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-73009\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69595\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70585\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-78445\n  Windows Services for\n  NFS ONCRPC XDR Driver Remote Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69829\n  Windows Shell Remote\n  Code Execution Vulnerability\n  Critical\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72962\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Critical\n  8.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69890\n  Windows Virtual\n  Trusted Platform Module Elevation of Privilege Vulnerability\n  Critical\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-83498\n  Windows\n  Virtualization-Based Security (VBS) Enclave Elevation of Privilege\n  Vulnerability\n  Critical\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83501\n  Windows\n  Virtualization-Based Security (VBS) Information Disclosure Vulnerability\n  Critical\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69805\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7.5\n  No\n  No\n  EoP\n \n \n  CVE-2026-69806\n  .NET Elevation of\n  Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58649\n  .NET Information\n  Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69439\n  .NET and Visual Studio\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69522\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71328\n  .NET and Visual Studio\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-57099\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69304\n  ASP.NET Core Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-62810\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69821\n  Active Directory\n  Certificate Services (AD CS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69395\n  Active Directory\n  Certificate Services (AD CS) Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69624\n  Active Directory\n  Certificate Services (AD CS) Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69359\n  Active Directory\n  Domain Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72978\n  Active Directory\n  Federation Services (AD FS) Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69401\n  Audio Video Control\n  Transport Protocol Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62895\n  Azure Arc SQL Server\n  Extension Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77909\n  Azure CycleCloud\n  Information Disclosure Vulnerability\n  Important\n  7.7\n  No\n  No\n  Info\n \n \n  CVE-2026-81349\n  Azure HDInsight Ambari\n  Elevation of Privilege Vulnerability\n  Important\n  7.2\n  No\n  No\n  EoP\n \n \n  CVE-2026-69329\n  BranchCache Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69516\n  Connected Devices\n  Platform Service (Cdpsvc) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68824\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68847\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69470\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69625\n  Connected User\n  Experiences and Telemetry Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73014\n  Data Sharing Service\n  Client Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73016\n  DirectWrite Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81380\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  5.3\n  No\n  No\n  Info\n \n \n  CVE-2026-81381\n  GitHub Copilot and\n  Visual Studio Code Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69576\n  Graphic Fonts\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81353\n  HEIF Image Extensions\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-58600\n  HEVC Video Extensions\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69731\n  HID Class Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68895\n  Internet Storage Name\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69275\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69900\n  Kernel Streaming WOW\n  Thunk Service Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68850\n  Microsoft Account\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68852\n  Microsoft Account\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-84003\n  Microsoft\n  Authentication Library (MSAL) for Node.js Spoofing Vulnerability\n  Important\n  7.4\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-80097\n  Microsoft\n  Authenticator Elevation of Privilege Vulnerability\n  Important\n  8.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-83948\n  Microsoft Azure CLI\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69299\n  Microsoft COM for\n  Windows Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69294\n  Microsoft COM for\n  Windows Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69491\n  Microsoft DirectMusic\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77908\n  Microsoft Dynamics 365\n  On-Premises Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81387\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81390\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81391\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81392\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81393\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81394\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81395\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81399\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81400\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81401\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81958\n  Microsoft Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-81386\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81388\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81389\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-81396\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81397\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81398\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81947\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81954\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81956\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81957\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81960\n  Microsoft Excel Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69378\n  Microsoft Exchange\n  Server Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69380\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69641\n  Microsoft Exchange\n  Server Elevation of Privilege Vulnerability\n  Important\n  9.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69382\n  Microsoft Exchange\n  Server Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-55007\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69355\n  Microsoft Exchange\n  Server Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69356\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  9.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69361\n  Microsoft Exchange\n  Server Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69375\n  Microsoft Exchange\n  Server Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69467\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83990\n  Microsoft Graphics\n  Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84000\n  Microsoft Graphics\n  Component Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69605\n  Microsoft Install\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69325\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69438\n  Microsoft JScript\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69277\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69365\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69594\n  Microsoft Local\n  Security Authority (LSA) Server Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69477\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  7.3\n  No\n  No\n  RCE\n \n \n  CVE-2026-69529\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69614\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69778\n  Microsoft Office\n  Access Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72974\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78515\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-85875\n  Microsoft Office Excel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78518\n  Microsoft Office Excel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69626\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69739\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80076\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80078\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80082\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80087\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80089\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80091\n  Microsoft Office\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80073\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80084\n  Microsoft Office\n  Outlook Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69629\n  Microsoft Office\n  Outlook Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72938\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72956\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72975\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72977\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78513\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80086\n  Microsoft Office\n  PowerPoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80081\n  Microsoft Office\n  PowerPoint Remote Code Execution Vulnerability\n  Important\n  \n  No\n  No\n  RCE\n \n \n  CVE-2026-69742\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-81385\n  Microsoft Office\n  Publisher Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69442\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78524\n  Microsoft Office\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69464\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69716\n  Microsoft Office\n  SharePoint Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69409\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69636\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69683\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69904\n  Microsoft Office\n  SharePoint Information Disclosure Vulnerability\n  Important\n  3.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69268\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69273\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69282\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69465\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69724\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69804\n  Microsoft Office\n  SharePoint Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69402\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69417\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  7.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69615\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  3.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69690\n  Microsoft Office\n  SharePoint Spoofing Vulnerability\n  Important\n  4.6\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-64918\n  Microsoft Office\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-68843\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69719\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69734\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72976\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5\n  No\n  No\n  Info\n \n \n  CVE-2026-77911\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78502\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78503\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78506\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78522\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80079\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  \n  No\n  No\n  Info\n \n \n  CVE-2026-80088\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-80090\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83949\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83951\n  Microsoft Office Word\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69360\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69556\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69671\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69686\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69722\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69759\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69764\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72972\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72973\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77901\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78504\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78507\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78511\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78512\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78514\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78517\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78521\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78526\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80080\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80085\n  Microsoft Office Word\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69397\n  Microsoft OpenSSH for\n  Windows Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-77897\n  Microsoft Power\n  Automate Desktop Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62801\n  Microsoft PowerShell\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-57098\n  Microsoft Remote\n  Desktop App for Windows Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67376\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67633\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-67641\n  Microsoft SQL Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66814\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66818\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66819\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67368\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67370\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67381\n  Microsoft SQL Server\n  Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-67369\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67383\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67386\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67389\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67390\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67393\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67624\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67629\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67630\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67645\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-67648\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68776\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68777\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68778\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68779\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68780\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68781\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68784\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69562\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-73029\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77488\n  Microsoft SQL Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-47297\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-67373\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67379\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-67380\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67384\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67385\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67388\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67638\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67639\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-67642\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68775\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68785\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  4.9\n  No\n  No\n  RCE\n \n \n  CVE-2026-68786\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68787\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77481\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77482\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77484\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77486\n  Microsoft SQL Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66816\n  Microsoft SQL Server\n  Security Feature Bypass Vulnerability\n  Important\n  6.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-68885\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68888\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68889\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68890\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68892\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68897\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69269\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69271\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69272\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69313\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69336\n  Microsoft Standard XPS\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68881\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68891\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69308\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69345\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69367\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69376\n  Microsoft Standard XPS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69824\n  Microsoft Standard XPS\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72946\n  Microsoft Storage Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-65812\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  6.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69559\n  Microsoft Teams for\n  Android Information Disclosure Vulnerability\n  Important\n  5.8\n  No\n  No\n  Info\n \n \n  CVE-2026-56198\n  Microsoft Trace Data\n  Helper Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69276\n  Microsoft UxTheme\n  Library (uxtheme.dll) Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69420\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69427\n  Microsoft VOLSNAP.SYS\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72933\n  Microsoft WDAC OLE DB\n  provider for SQL Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62706\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62744\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69386\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69408\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69511\n  Microsoft Windows\n  Media Foundation Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69586\n  Microsoft Windows PDF\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78451\n  Microsoft Windows SCSI\n  Class System File Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78452\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-78453\n  Microsoft Windows SCSI\n  Class System File Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68896\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69305\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69322\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69585\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69600\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69608\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69911\n  Microsoft Windows\n  Search Component Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69507\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70145\n  Microsoft Windows\n  Search Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69453\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69554\n  Microsoft Windows\n  Search Component Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69444\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69456\n  Microsoft Windows\n  Speech Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69531\n  Microsoft Windows\n  Speech Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62804\n  Microsoft Word Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69807\n  PowerShell Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69303\n  Push Message Routing\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69819\n  RPC Runtime Library\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68828\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69358\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69485\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-78463\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80074\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80077\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-83998\n  Remote Desktop Client\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69292\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69338\n  Remote Desktop Gateway\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68893\n  Remote Desktop\n  Licensing Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69514\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69525\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69536\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69539\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69599\n  Remote Desktop\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69509\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69621\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72944\n  Role: Windows Fax\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-66820\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73028\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77480\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77483\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77485\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77487\n  SQL Server Elevation\n  of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78456\n  SQL Server Remote Code\n  Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-66304\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-66306\n  Skype for Business\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-63523\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66305\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  7.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69642\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  6.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69646\n  Skype for Business\n  Spoofing Vulnerability\n  Important\n  8.3\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-66303\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66307\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-66308\n  Skype for Business and\n  Lync Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69568\n  Storage Spaces\n  Controller Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69431\n  Telnet Client Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69384\n  Virtual Hard Disk\n  (VHD) Miniport Driver Denial of Service Vulnerability\n  Important\n  7.1\n  No\n  No\n  DoS\n \n \n  CVE-2026-69541\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69549\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69611\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69681\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70574\n  Virtual Hard Disk\n  (VHD) Miniport Driver Elevation of Privilege Vulernability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-81383\n  Visual Studio Code\n  Information Disclosure Vulnerability\n  Important\n  7.4\n  No\n  No\n  Info\n \n \n  CVE-2026-70334\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-78461\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  7.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-78462\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-81356\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81357\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81376\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  9.6\n  No\n  No\n  SFB\n \n \n  CVE-2026-81378\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81379\n  Visual Studio Code\n  Security Feature Bypass Vulnerability\n  Important\n  8.2\n  No\n  No\n  SFB\n \n \n  CVE-2026-81377\n  Visual Studio Code\n  Tampering Vulnerability\n  Important\n  6.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77906\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-77907\n  Visual Studio Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69407\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69418\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69432\n  Volume Manager Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72985\n  Volume Shadow Copy\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69609\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69808\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69832\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69853\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-70290\n  Win32k Information\n  Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70565\n  Windows AF_UNIX Socket\n  Provider Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69834\n  Windows ALPC Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69654\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69816\n  Windows Accounts\n  Control Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-62762\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69809\n  Windows Active\n  Directory Domain Services Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-62813\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69524\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69546\n  Windows Active\n  Directory Domain Services Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-50349\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70342\n  Windows Ancillary\n  Function Driver for WinSock Elevation of Privilege Vulnerability\n  Important\n  8.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69311\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69394\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69447\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69540\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69604\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69692\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69801\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70562\n  Windows Audio Service\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73005\n  Windows Authentication\n  Methods Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73004\n  Windows Autopilot\n  Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-68825\n  Windows Bind Filter\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69293\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69298\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69323\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69352\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69476\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69580\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69583\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69589\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69593\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69727\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69738\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69773\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69787\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69826\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70572\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70573\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70581\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72941\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72990\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72991\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72992\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72993\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72994\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72995\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72996\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72997\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73000\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73001\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73002\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73007\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73011\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73015\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73020\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73021\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73026\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77489\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78447\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78448\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83954\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83955\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83967\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83968\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83969\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83970\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83971\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83972\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83973\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83974\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83975\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83976\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83977\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83978\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83979\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83980\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83981\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83982\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83983\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83985\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83986\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83987\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83988\n  Windows Biometric\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-73008\n  Windows Biometric\n  Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69458\n  Windows BitLocker\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69449\n  Windows BitLocker\n  Remote Code Execution Vulnerability\n  Important\n  6.7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69817\n  Windows Bluetooth Port\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68849\n  Windows Bluetooth Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69388\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69398\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69448\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69889\n  Windows Bluetooth\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77892\n  Windows Boot Manager\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69735\n  Windows Broadcast DVR\n  User Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69391\n  Windows Broker\n  Infrastructure Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69283\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69561\n  Windows CD-ROM Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78454\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78508\n  Windows CD-ROM Driver\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69542\n  Windows Camera Frame\n  Server Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69279\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-80093\n  Windows Cloud Files\n  Mini Filter Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83991\n  Windows Cloud Files\n  Mini Filter Driver Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69445\n  Windows Compressed\n  Folder Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70019\n  Windows Compressed\n  Folder Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69496\n  Windows Compressed\n  Folder Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69267\n  Windows Connected User\n  Experiences and Telemetry Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69771\n  Windows Container\n  Manager Service Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-70583\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70584\n  Windows Core Messaging\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70578\n  Windows Credential\n  Guard Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69790\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69814\n  Windows Credential\n  Providers Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69729\n  Windows Credential\n  Providers Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69284\n  Windows DCOM Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69781\n  Windows DHCP Client\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69777\n  Windows DHCP Client\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69342\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69405\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69416\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69497\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69637\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69679\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-70065\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77494\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77498\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77499\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77501\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77502\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77886\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77888\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77889\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77890\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77893\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-77895\n  Windows DHCP Server\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69415\n  Windows DHCP Server\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69297\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69803\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69929\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69930\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-70124\n  Windows DHCP Server\n  Information Disclosure Vulnerability\n  Important\n  5.9\n  No\n  No\n  Info\n \n \n  CVE-2026-69266\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69412\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69510\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69547\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69620\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69847\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69876\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69878\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77887\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-77891\n  Windows DHCP Server\n  Remote Code Execution Vulnerability\n  Important\n  6.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69631\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70091\n  Windows DNS Denial of\n  Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69310\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72948\n  Windows DNS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69369\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69672\n  Windows DNS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78523\n  Windows DNS Server\n  Denial of Service Vulnerability\n  Important\n  5.9\n  No\n  No\n  DoS\n \n \n  CVE-2026-69551\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69782\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69989\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-72928\n  Windows DNS Server\n  Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69680\n  Windows DNS Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69775\n  Windows DWM Core\n  Library Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70568\n  Windows Defender\n  Firewall Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68831\n  Windows Defender\n  Firewall Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69607\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-72943\n  Windows Deployment\n  Services Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69314\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69693\n  Windows Device\n  Association Broker Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69296\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69478\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69488\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69574\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69581\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69711\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69714\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69791\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69866\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77500\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83940\n  Windows Device\n  Association Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69443\n  Windows Device Health\n  Attestation (DHA) Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69472\n  Windows Devices Human\n  Interface Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69715\n  Windows Direct Show\n  Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-70567\n  Windows Display\n  Enhancement Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78446\n  Windows Distributed\n  File System (DFS) Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-69424\n  Windows Distributed\n  File System (DFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69430\n  Windows Embedded Mode\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69688\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69841\n  Windows Encrypting\n  File System (EFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69794\n  Windows Encrypting\n  File System (EFS) Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69481\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69907\n  Windows Enterprise App\n  Management Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68894\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69362\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69433\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69436\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69450\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69462\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69513\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69612\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69896\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83996\n  Windows Error\n  Reporting Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69684\n  Windows Error\n  Reporting Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69482\n  Windows Error\n  Reporting Tampering Vulnerability\n  Important\n  7.1\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69493\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69494\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69495\n  Windows Event Logging\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71338\n  Windows Failover\n  Cluster Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-72989\n  Windows Failover\n  Cluster Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68878\n  Windows Fast FAT\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69347\n  Windows Fast FAT\n  Driver Remote Code Execution Vulnerability\n  Important\n  7.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-68837\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71340\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72947\n  Windows File History\n  Service Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77491\n  Windows GDI\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68827\n  Windows GDI+ Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69288\n  Windows GDI+\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69717\n  Windows Group Policy\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69623\n  Windows HTTP Print\n  Provider Remote Code Execution Vulnerability\n  Important\n  8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69597\n  Windows HTTP.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69682\n  Windows Host Guardian\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69553\n  Windows Hyper-V\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69910\n  Windows Hyper-V Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69694\n  Windows IP Address\n  Management (IPAM) Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69341\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69500\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69613\n  Windows Image\n  Acquisition Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69483\n  Windows Image\n  Acquisition Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69318\n  Windows Imaging\n  Component Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83992\n  Windows Imaging\n  Component Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-62694\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69441\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71339\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72929\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77894\n  Windows Installer\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72926\n  Windows Internet\n  Connection Sharing (ICS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72964\n  Windows Internet\n  Connection Sharing (ICS) Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69587\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69881\n  Windows Internet Key\n  Exchange (IKE) Extension Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69429\n  Windows Internet Key\n  Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69744\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69760\n  Windows Kerberos\n  Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69685\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69822\n  Windows Kerberos\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68846\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68884\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69366\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69466\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69473\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69578\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83942\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-85360\n  Windows Kernel\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69406\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69723\n  Windows Kernel\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69669\n  Windows Kernel Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69421\n  Windows Kernel-Mode\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-84001\n  Windows Key\n  Distribution Center Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69428\n  Windows LDAP -\n  Lightweight Directory Access Protocol Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69281\n  Windows License\n  Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69315\n  Windows License\n  Manager Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69732\n  Windows Link Layer\n  Topology Discovery Protocol Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69440\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69508\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69720\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78464\n  Windows MIDI Service\n  Module Elevation of Privileges Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68842\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69339\n  Windows MIDI Service\n  Module Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69451\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70582\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  6.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-77905\n  Windows Management\n  Instrumentation Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69349\n  Windows Management\n  Instrumentation Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-73012\n  Windows Management\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69891\n  Windows Media\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69645\n  Windows Message\n  Queuing Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68887\n  Windows Message\n  Queuing Queue Manager Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72932\n  Windows Message\n  Queuing Queue Manager Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83997\n  Windows Message\n  Queuing Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-70579\n  Windows Mobile\n  Broadband Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69377\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69460\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-70577\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73003\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-73022\n  Windows Modern Device\n  Management (MDM) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69674\n  Windows Modern Device\n  Management (MDM) Security Feature Bypass Vulnerability\n  Important\n  5.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72963\n  Windows Modern\n  Execution Server Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69357\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69396\n  Windows NDIS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-71334\n  Windows NFS Portmapper\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68832\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68834\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68838\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68841\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69265\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69312\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69332\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69340\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69379\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69505\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69532\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69567\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69875\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72935\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-77503\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  8.4\n  No\n  No\n  EoP\n \n \n  CVE-2026-83995\n  Windows NTFS Elevation\n  of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68851\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69504\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69591\n  Windows NTFS\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-68833\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68875\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69461\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69463\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69479\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69566\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69638\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  8.4\n  No\n  No\n  RCE\n \n \n  CVE-2026-69709\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71329\n  Windows NTFS Remote\n  Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69425\n  Windows NTFS Tampering\n  Vulnerability\n  Important\n  4.7\n  No\n  No\n  Tampering\n \n \n  CVE-2026-62759\n  Windows Netlogon\n  Spoofing Vulnerability\n  Important\n  7.5\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-72967\n  Windows Network\n  Connection Broker Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68886\n  Windows Network\n  Connection Broker Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69372\n  Windows Network File\n  System Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-69772\n  Windows Network File\n  System Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69648\n  Windows Notification\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78441\n  Windows OLE DB\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-78442\n  Windows OLE DB Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69564\n  Windows Online\n  Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69350\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69368\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69371\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69373\n  Windows Overlay Filter\n  Elevation of Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69316\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69343\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69474\n  Windows Overlay Filter\n  Information Disclosure Vulnerability\n  Important\n  4.8\n  No\n  No\n  Info\n \n \n  CVE-2026-69480\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69492\n  Windows Partition\n  Management Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71341\n  Windows Partition\n  Management Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69324\n  Windows Performance\n  Monitor Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69459\n  Windows Power\n  Dependency Coordinator Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69321\n  Windows Power\n  Dependency Coordinator Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-69569\n  Windows Print Spooler\n  Components Denial of Service Vulnerability\n  Important\n  5.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-68835\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68848\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69309\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69346\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69364\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69838\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69921\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70564\n  Windows Print Spooler\n  Components Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69344\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69552\n  Windows Print Spooler\n  Components Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-85877\n  Windows Print Spooler\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69602\n  Windows\n  PrintWorkflowUserSvc Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-68845\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68876\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69534\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69563\n  Windows Program\n  Compatibility Assistant Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68873\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68874\n  Windows Program\n  Compatibility Assistant Service Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-62697\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69280\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69300\n  Windows Push\n  Notifications Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69548\n  Windows RNDIS\n  Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-69768\n  Windows RNDIS Remote\n  Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69337\n  Windows Registry\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69331\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69455\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71333\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71342\n  Windows Remote Access\n  Connection Manager Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71343\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71352\n  Windows Remote Access\n  Connection Manager Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72966\n  Windows Remote Access\n  Connection Manager Tampering Vulnerability\n  Important\n  5.5\n  No\n  No\n  Tampering\n \n \n  CVE-2026-77896\n  Windows Remote Desktop\n  Client Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69317\n  Windows Remote Desktop\n  Client Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69627\n  Windows Remote Desktop\n  Licensing Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-70587\n  Windows Remote Desktop\n  Protocol Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69287\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69475\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-80096\n  Windows Remote Desktop\n  Services Elevation of Privilege Vulnerability\n  Important\n  8.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69616\n  Windows Remote Desktop\n  Services Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-83999\n  Windows Resilient File\n  System (ReFS) Deduplication Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69617\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-83952\n  Windows Resilient File\n  System (ReFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72939\n  Windows Routing and\n  Remote Access Service (RRAS) Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-71351\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71353\n  Windows Routing and\n  Remote Access Service (RRAS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70570\n  Windows Routing and\n  Remote Access Service (RRAS) Remote Code Execution Vulnerability\n  Important\n  7.5\n  No\n  No\n  RCE\n \n \n  CVE-2026-69544\n  Windows SMB Client\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69572\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69618\n  Windows SMB Client\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72936\n  Windows SMB Client\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69374\n  Windows SMB Server\n  Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69403\n  Windows SMB Server\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72949\n  Windows SMB Server\n  Network Transport Driver (srvnet.sys) Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-70575\n  Windows Schannel\n  Denial of Service Vulnerability\n  Important\n  5.3\n  No\n  No\n  DoS\n \n \n  CVE-2026-72940\n  Windows Schannel\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69713\n  Windows Secure Boot\n  Security Feature Bypass Vulnerability\n  Important\n  4.4\n  No\n  No\n  SFB\n \n \n  CVE-2026-72931\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Denial of Service Vulnerability\n  Important\n  4.7\n  No\n  No\n  DoS\n \n \n  CVE-2026-71332\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72930\n  Windows Secure Socket\n  Tunneling Protocol (SSTP) Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-77899\n  Windows Security\n  Center Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-78457\n  Windows Security\n  Health Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-56177\n  Windows Server\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-83989\n  Windows Services for\n  NFS ONCRPC XDR Driver Denial of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-73024\n  Windows Services for\n  NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71330\n  Windows Services for\n  NFS ONCRPC XDR Driver Information Disclosure Vulnerability\n  Important\n  7.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69289\n  Windows Setup Files\n  Cleanup Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69383\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69392\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69528\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69606\n  Windows Shell\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70563\n  Windows Shell Spoofing\n  Vulnerability\n  Important\n  8.1\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-69785\n  Windows Smart Card\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69512\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69535\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69643\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69691\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70569\n  Windows Spaceport.sys\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69390\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69393\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.7\n  No\n  No\n  Info\n \n \n  CVE-2026-69741\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69770\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69895\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  4.7\n  No\n  No\n  Info\n \n \n  CVE-2026-72942\n  Windows Spaceport.sys\n  Information Disclosure Vulnerability\n  Important\n  6.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69538\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71345\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71348\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71349\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-71350\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  6.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-72952\n  Windows Spaceport.sys\n  Remote Code Execution Vulnerability\n  Important\n  7\n  No\n  No\n  RCE\n \n \n  CVE-2026-69328\n  Windows Storage\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78516\n  Windows Storage\n  Information Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-69389\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-71337\n  Windows Storage\n  Management Provider Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69381\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  4.6\n  No\n  No\n  Info\n \n \n  CVE-2026-72937\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-77492\n  Windows Storage Port\n  Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69290\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69575\n  Windows Storage Spaces\n  Controller Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68844\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-68877\n  Windows Storage Spaces\n  Controller Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69588\n  Windows TCP/IP Denial\n  of Service Vulnerability\n  Important\n  7.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69385\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69404\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69757\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69761\n  Windows TCP/IP\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69793\n  Windows TCP/IP\n  Security Feature Bypass Vulnerability\n  Important\n  7.5\n  No\n  No\n  SFB\n \n \n  CVE-2026-72945\n  Windows Task Scheduler\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69353\n  Windows Text Shaping\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69786\n  Windows Text Shaping\n  Remote Code Execution Vulnerability\n  Important\n  8.1\n  No\n  No\n  RCE\n \n \n  CVE-2026-69434\n  Windows URL Moniker\n  Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73019\n  Windows URL Moniker\n  Security Feature Bypass Vulnerability\n  Important\n  4.3\n  No\n  No\n  SFB\n \n \n  CVE-2026-69286\n  Windows USB Audio\n  Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69270\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69307\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69413\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69469\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  6.6\n  No\n  No\n  EoP\n \n \n  CVE-2026-69571\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69687\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69707\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69859\n  Windows USB Audio\n  Class driver (usbaudio.sys) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-68840\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69295\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69503\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-72953\n  Windows USB Driver\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69457\n  Windows USB Driver\n  Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-72999\n  Windows USB Hub Driver\n  Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69490\n  Windows USB Mass\n  Storage Class Driver Elevation of Privilege Vulnerability\n  Important\n  6.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69527\n  Windows USB Mass\n  Storage Class Driver Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-68839\n  Windows USB Mass\n  Storage Class Driver Remote Code Execution Vulnerability\n  Important\n  9.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69319\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69422\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69423\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69584\n  Windows USB Video\n  Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69573\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69592\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69758\n  Windows Universal Disk\n  Format File System Driver (UDFS) Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68830\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69351\n  Windows Universal Plug\n  and Play (UPnP) Device Host Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-56172\n  Windows VHD miniport\n  driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69426\n  Windows VOLSNAP.SYS\n  Remote Code Execution Vulnerability\n  Important\n  7.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69468\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69582\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-77904\n  Windows Volume Manager\n  Extension Driver Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69291\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69334\n  Windows Volume Manager\n  Extension Driver Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69708\n  Windows Web Platform\n  Storage Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-72965\n  Windows WebClient\n  Service Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69792\n  Windows Win32K\n  Security Feature Bypass Vulnerability\n  Important\n  4.7\n  No\n  No\n  SFB\n \n \n  CVE-2026-68880\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69274\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69301\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69333\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69335\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69348\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69410\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69498\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69610\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69630\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69652\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69689\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69706\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.1\n  No\n  No\n  EoP\n \n \n  CVE-2026-69762\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69779\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69818\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69844\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-70283\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-70289\n  Windows Win32k\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69517\n  Windows Wireless\n  Networking Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-69862\n  Windows Wireless Wide\n  Area Network Service Information Disclosure Vulnerability\n  Important\n  5.5\n  No\n  No\n  Info\n \n \n  CVE-2026-69560\n  Windows Work Folder\n  Service Elevation of Privilege Vulnerability\n  Important\n  7\n  No\n  No\n  EoP\n \n \n  CVE-2026-71336\n  Windows Work Folder\n  Service Remote Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-80075\n  Windows Work Folders\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-69619\n  Windows exFAT File\n  System Elevation of Privilege Vulnerability\n  Important\n  8\n  No\n  No\n  EoP\n \n \n  CVE-2026-68898\n  Windows iSCSI Denial\n  of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-69598\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-69628\n  Windows iSCSI Remote\n  Code Execution Vulnerability\n  Important\n  8.8\n  No\n  No\n  RCE\n \n \n  CVE-2026-73025\n  Windows iSCSI Security\n  Feature Bypass Vulnerability\n  Important\n  9.8\n  No\n  No\n  SFB\n \n \n  CVE-2026-69839\n  Windows iSCSI Target\n  Service Denial of Service Vulnerability\n  Important\n  6.5\n  No\n  No\n  DoS\n \n \n  CVE-2026-72927\n  Winsock Elevation of\n  Privilege Vulnerability\n  Important\n  6.7\n  No\n  No\n  EoP\n \n \n  CVE-2026-58611\n  Xbox Gaming Services\n  Elevation of Privilege Vulnerability\n  Important\n  7.8\n  No\n  No\n  EoP\n \n \n  CVE-2026-78455\n  Xbox Information\n  Disclosure Vulnerability\n  Important\n  4.3\n  No\n  No\n  Info\n \n \n  CVE-2026-84353 *\n  Chromium:\n  CVE-2026-84353 Use after free in Shared Tab Groups\n  Critical\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84324 *\n  Chromium:\n  CVE-2026-84324 Use after free in Proxy\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84325 *\n  Chromium:\n  CVE-2026-84325 Improper input validation in DataTransfer\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84326 *\n  Chromium:\n  CVE-2026-84326 Uninitialized resource in V8\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84359 *\n  Chromium:\n  CVE-2026-84359 Information leak in Skia\n  High\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84357 *\n  Chromium:\n  CVE-2026-84357 Improper input validation in Omnibox\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84349 *\n  Chromium:\n  CVE-2026-84349 Use after free in Browser\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84351 *\n  Chromium:\n  CVE-2026-84351 Buffer overflow in GPU\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84354 *\n  Chromium:\n  CVE-2026-84354 Incorrect authorization in FileSystem\n  High\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84323 *\n  Chromium:\n  CVE-2026-84323 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84328 *\n  Chromium:\n  CVE-2026-84328 Missing authorization in FileSystem\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84332 *\n  Chromium:\n  CVE-2026-84332 Incorrect authorization in SiteSettings\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84334 *\n  Chromium:\n  CVE-2026-84334 Incorrect authorization in Chromoting\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84335 *\n  Chromium:\n  CVE-2026-84335 Incorrect authorization in TabStrip\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84347 *\n  Chromium:\n  CVE-2026-84347 Use after free in WebRTC\n  Medium\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84348 *\n  Chromium:\n  CVE-2026-84348 Information leak in MediaCapture\n  Medium\n  N/A\n  No\n  No\n  Info\n \n \n  CVE-2026-84355 *\n  Chromium:\n  CVE-2026-84355 Incorrect authorization in Navigation\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84358 *\n  Chromium:\n  CVE-2026-84358 Improper privilege management in Downloads\n  Medium\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84327 *\n  Chromium:\n  CVE-2026-84327 Incorrect authorization in Autofill\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n  CVE-2026-84329 *\n  Chromium:\n  CVE-2026-84329 Confused deputy in CredentialProvider\n  Low\n  N/A\n  No\n  No\n  EoP\n \n \n  CVE-2026-84331 *\n  Chromium:\n  CVE-2026-84331 Incorrect authorization in Actor\n  Low\n  N/A\n  No\n  No\n  SFB\n \n \n  CVE-2026-84350 *\n  Chromium:\n  CVE-2026-84350 Use after free in TabStrip\n  Low\n  N/A\n  No\n  No\n  RCE\n \n \n  CVE-2026-84356 *\n  Chromium:\n  CVE-2026-84356 UI misrepresentation in FullScreen\n  Low\n  N/A\n  No\n  No\n  Spoofing\n \n \n \n  \n  \n  \n  \n  \n  \n  \n \n \n\n\n\n\n\n\n\n\n\n\n\n\n  \n  \n\n\n\n\n\n\n\n\n\n\n  \n* Indicates this CVE had been released by a third party and is now being included in Microsoft releases.\n** Indicates this CVEs has already been resolved by Microsoft, and no further action is needed by the end user.\n\u2020 Indicates further administrative actions are required to fully address the vulnerability.\n \nAs with last month, I\u2019ll do my best to summarize everything else in this release but assume there are details I miss that are relevant to your environment.\nThere are roughly 90+ Critical rated bug remaining, and I\u2019ll do my best to call out which ones you should care about. First, ignore those CVSS 10 bugs. They\u2019ve already been patched by Microsoft, so there\u2019s no action for you. But don\u2019t ignore the EoP in Spring Cloud Azure. It\u2019s a complex scenario, but Microsoft still lists it as exploitation more likely. There\u2019s a plethora of server-side bugs rated at a CVSS of 9.8, including Skype for Business (remember that one?). \nFrom here on out, I\u2019ll try to break things down by component rather than severity rating or impact. It may make it easier. We\u2019ll see. \u00af\\_(\u30c4)_/\u00af\nWindows DHCP Server: Windows DHCP Server chimes in with 36 bugs: 12 RCE, 18 DoS, five info leaks, and one EoP. Nothing exploited or disclosed, but 22 of the 36 require no authentication. It's the third-largest single-component pile of the month, and it's all one story: someone pointed a (likely AI-assisted) fuzzer at DHCP packet parsing. In addition to the two wormable bugs already mentioned, there are three more that didn\u2019t carry the exact wormable verbiage but look like close cousins: CVE-2026-69845 (9.8, heap overflow), CVE-2026-69266 (8.8, integer overflow), and CVE-2026-69620 (8.1, stack overflow). If you're being generous, that's five wormable-shaped bugs in DHCP Server alone. The remaining seven RCEs need an authorized attacker. CWE spread is pure memory corruption: heap, stack, UAF, integer overflow. There are 18 DoS bugs, and 13 are unauthenticated at a CVSS score of 7.5. Malformed packet in, service crash out. Individually boring, but collectively, an unauthenticated attacker on the network has 13 different ways to take out DHCP, and when DHCP dies, clients stop getting leases and the helpdesk phone starts ringing. Finally, there are a couple of oddballs here: CVE-2026-69297 is an info leak that could expose passwords stored in a recoverable format, which is a configuration-secrets problem rather than a memory bug. The lone EoP is missing authentication on a critical function.\nWindows Biometric Service: 64 bugs here, and 63 of them look almost identical. It's one bug class, stamped 56 times. CWE-122 heap-based buffer overflow accounts for 56 of them, with 5 integer overflows, 2 use-after-frees, and a NULL dereference rounding out the memory-corruption set. There are two worth noting: CVE-2026-69727. It has an outlier exploit vector: it reads \u201celevate privileges over a network\u201d rather than locally, which is not what you want to see in a biometric service. The other is CVE-2026-73008. The lone info disclosure and it's CWE-359: exposure of private personal information. A biometric service leaking PII with high confidentiality impact is a worse look than the score implies. It also makes it a natural companion to the Hello cleartext tampering bug.\nWindows Hello: Nine bugs here, with eight being Critical EoPs that result in an attacker gaining Virtual Trust Level 1 privileges. Code execution across the VTL0-to-VTL1 boundary into the secure world where VBS keeps credentials and biometric templates. That's the same trust line as Key Guard, and it's why they're rated Critical despite local vectors.\nExchange Server: Only nine bugs here, but there are some whoppers. Three different bugs rate CVSS 9.1 or higher. CVE-2026-69380 is an interesting exploit. A low-privileged user with a mailbox abuses request/token validation to impersonate any user and take over every mailbox: read, send, download attachments. Post-phish, this turns one compromised account into the whole org's mail. An unauthenticated mail-processing RCE plus a mailbox-takeover EoP in the same release is a chainable pair on paper. Initial access and lateral movement in one Cumulative Update. The other unauthenticated bug to mention is CVE-2026-69356, an specially crafted calendar invite; victim clicks the Join link, and script runs in their context. XSS wearing a spoofing label. Neat.\nMicrosoft Office Components: There are 110 Office-family bugs this month (excluding SharePoint's 17): 64 RCE, 45 info disclosure, and 1 spoofing. Most are of the open-and-own variety, but a few stick out, namely a CVSS 98 bug in Outlook\u2019s CVSS 9.8 duo. CVE-2026-78509 is a Critical RCE. It has a network vector, no user interaction per the metrics, and explicitly lists the Preview Pane as an attack vector. That's the worst combination Office offers: code execution from a message you merely preview. There are a few other Preview Pane bugs in Office and Word. \nSharePoint Server: This month\u2019s release includes 16 SharePoint bugs: six RCE, two EoP, four spoofing, and four info disclosure. All Important, none exploited or publicly disclosed, nothing rated above \u201cExploitation Less Likely\u201d, but given SharePoint's recent history of \u201cLess Likely\u201d becoming \u201cin the KEV catalog,\u201d the RCE set deserves respect. The RCE bugs do all require authentication, but the level is pretty basic, although the bug classes (deserialization, SQLi, SSRF, XSS, auth bypass) read like a web-app pentest report rather than memory corruption. The EoPs continue the theme of web-app sins in a server product: CVE-2026-69716 is a SQL injection letting a low-privileged user run database commands with elevated privileges; CVE-2026-83950 is an SSRF-based EoP; 69464 is an unnecessary-privileges flaw at CVSS 8.8.\nMicrosoft SQL Server: As previously mentioned, there are over 62 SQL Server bugs in this release: 61 in SQL Server proper plus the Azure Arc SQL Server Extension. Here\u2019s the breakdown: 23 RCE, 14 EoP, 21 info disclosure, three DoS, and one SFB. Five are Critical. The overwhelming pattern is authenticated memory corruption. 55 of 62 require an authorized attacker, and the CWE spread is dominated by heap overflows (15 of the RCEs are CWE-122 alone) and out-of-bounds reads (13 of the info leaks). The template is CVE-2026-67378\u2019s: log in, submit a crafted query, corrupt memory, run code on the server. That's why the 8.8s here are less scary than they score; an attacker already needs database credentials, but it's also textbook post-compromise lateral movement.\nWindows DNS Server: There are 18 bugs here: 10 RCE, three DoS, two EoP, two info leaks, and one spoofing. Overwhelmingly use-after-frees in the server\u2019s record handling: another single-component sweep, but this one lands on domain controllers. We\u2019ve already mentioned a couple of wormable bugs, but the remaining RCE are not far off, but require either beating a race condition or non-default components. Unlike the DHCP pile, this one carries one of only two \u201cMore Likely\u201d unauthenticated 9.8. Patch your domain controllers, then patch them again just to be sure.\nWindows NTFS: We have 30 bugs in this component: 16 EoP, 10 RCE, three info leaks, and one link-following oddball. All Important except the two 9.8 Critical RCEs. Like Biometric and DHCP, it's one bug class on repeat: 28 of 30 are memory-safety flaws (heap overflows lead at 12, then out-of-bounds reads). The headliner is CVE-2026-69463; simple heap-overflow RCE at 9.8, unauthenticated, network vector. The FAQ only offers the vague \u201cin-network attacker calling arbitrary endpoints\u201d phrasing, which likely means the remote path is something like SMB-reachable file operations rather than a raw packet, but a 9.8 in the file system driver everyone runs is still a top-tier patch either way. CVE-2026-69461 (8.8, stack overflow, unauth network) rides along just below them. Everything else can be somewhat dismissed as local-only noise, but remember the mount-a-drive trio that where \u201crequires physical access\u201d describes every USB port in the building.\nThe USB Stack: There are 23 bugs impacting the USB stack, but I really only want to talk about one. CVE-2026-68839 (USB Mass Storage Class Driver) with a CVSS of 9.8 and a network vector. The FAQ offers only the generic \u201cin-network attacker calling arbitrary endpoints\u201d boilerplate, which doesn't explain how a USB class driver is network-reachable. Either the metric is scored to worst case or there's a remote path (RDP device redirection would be the plausible one). I'd treat the score skeptically in print but patch like it's real.\nKerberos and the KDC: Six different bugs affect these components, but it\u2019s the two Critical rated ones that raised my eyebrows. Six bugs across Kerberos and the KDC \u2014 two Critical RCEs, two EoPs, and two DoS. Nothing exploited or disclosed, but one carries the rating that matters. CVE-2026-69676 is an RCE in Kerberos with a CVSS of 8.8 and classified as Exploitation More Likely. An authenticated attacker with low-level access sends a crafted request and executes code on the server, no user interaction. \u201cThe server\u201d here means a domain controller, and any authenticated attacker means any domain user. So the realistic read is: one phished workstation account, one crafted request, code execution on the DC. That's a domain-compromise primitive, and Microsoft expects to see it exploited. CVE-2026-69712 is in KDC and reads almost identical to the previous: authenticated, low-level access, crafted request, code on the server, no interaction, but this one's a use-after-free in the KDC itself, the component that mints every ticket in the domain. Its practical impact is identical to 69676; only the exploitability rating separates them. \nExploitation More Likely: If you prioritize by Microsoft\u2019s Exploit Index (XI), which I don\u2019t recommend, there are a couple of bugs not mentioned yet: CVE-2026-72940 (Schannel RCE, CVSS 8.8, TLS stack), CVE-2026-72957 (Windows Deployment Services RCE, CVSS 7.8, PXE infrastructure), CVE-2026-71343 (Remote Access Connection Manager RCE, CVSS 7.8), and CVE-2026-70585 (a third NFS ONCRPC XDR RCE, CVSS 7.0). Again, I take all of these rating with a gigantic grain of salt, but you do you.\nThe Remnants: Another ~100 bugs land in six familiar components: Win32k (25), Standard XPS (18), WER (13), Device Association (13), Search (11), Print Spooler (11). Almost all are local EoPs to SYSTEM, but don't skim past them: 19 are rated More Likely, and XPS smuggles in an unauthenticated 9.8 RCE (CVE-2026-69824).\nNo new advisories are being released this month.\nLooking Ahead\nThe next Patch Tuesday will be on October 13. Assuming I survive the fun that is Pwn2Own Ireland, I\u2019ll be back then to give you my full thoughts on the release \u2013 no matter how large it may be. Until then, stay safe, happy patching, and may all your reboots be smooth and clean!", "creation_timestamp": "2026-09-09T04:05:51.823825Z"}, {"uuid": "3bfa01f3-e92a-41c1-80d1-cbf877552808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62906", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:47:55.311287Z"}, {"uuid": "f71671f8-2269-4d6b-8b01-ad9ce7544f05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62694", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:48:04.899419Z"}, {"uuid": "bbc6cf38-6512-43e1-95dd-e15bd1e78211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62697", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:48:14.438320Z"}, {"uuid": "392e16b1-1146-439a-a53d-890a3a772159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62804", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:48:27.924121Z"}, {"uuid": "d1dbc75b-cffe-4fd7-92fc-a191cf80637a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mv2xzwbsqp2f", "content": "\ud83d\udccc CVE-2026-62916 - Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network. https://www.cyberhub.blog/cves/CVE-2026-62916", "creation_timestamp": "2026-09-09T07:07:07.973363Z"}, {"uuid": "4aa772d6-9d3b-4ab7-8c1e-018eca8853eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62801", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:48:41.573285Z"}, {"uuid": "caca3aee-fb51-4758-b254-dc990c0099e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62916", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:49:03.604492Z"}, {"uuid": "a65c3644-8280-4533-8e9a-bf14de5a23ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62744", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:53:14.626366Z"}, {"uuid": "2bf43e68-cc5e-4671-b6a9-4cc4b492636b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62762", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:54:28.754356Z"}, {"uuid": "aa97fa9e-dc95-4c72-b35e-c2a240b38d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:51:31.253662Z"}, {"uuid": "ccf17575-bc78-4374-b70f-96b1860fe7fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62759", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:54:53.256739Z"}, {"uuid": "020aee33-bda0-43ff-a331-c8af9de426e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62706", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:55:19.634858Z"}, {"uuid": "10ee274a-b57c-4ca0-a095-bd298749d447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62813", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:56:09.810332Z"}, {"uuid": "b882c588-8ed4-4ae8-83a6-15d59e4ae8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62810", "type": "seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-mensili-microsoft-24", "content": "", "creation_timestamp": "2026-09-09T08:56:25.252132Z"}, {"uuid": "a6f139e4-a904-4024-8c7b-a4234da7a100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "seen", "source": "https://t.me/GithubRedTeam/101779", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62201-OpenClaw-SSRF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diedromeo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 07:12:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDeep-dive analysis of CVE-2026-62201: OpenClaw sandbox exec-server network policy bypass (SSRF). Root cause, vulnerable vs patched code, exploitation, detection, remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T10:00:06.132030Z"}, {"uuid": "4e92626e-e8e5-4ea0-b22f-26d4ba4257c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mv3obpfw7n23", "content": "\ud83d\udd17 CVE : CVE-2026-62895, CVE-2026-69854, CVE-2026-77909, CVE-2026-81349, CVE-2026-83948, CVE-2026-62895, CVE-2026-69854, CVE-2026-77909, CVE-2026-81349, CVE-2026-83948", "creation_timestamp": "2026-09-09T13:45:11.006724Z"}, {"uuid": "2cfdb30c-facf-4a27-88b7-56b547d5d573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "seen", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-09T16:00:06.172927Z"}, {"uuid": "c7e104f0-7c2d-48cd-9fd8-bc3d09baa6ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "published-proof-of-concept", "source": "Telegram/6CB9q_72mBhsjQjI1J7xmJKbYDVj36uzEd2_SQzSzeH690k", "content": "", "creation_timestamp": "2026-09-10T00:00:34.371451Z"}, {"uuid": "5bbf1329-02c2-4c34-ab36-a569d2b01cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62201", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101779", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-62201-OpenClaw-SSRF\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a diedromeo\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 07:12:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nDeep-dive analysis of CVE-2026-62201: OpenClaw sandbox exec-server network policy bypass (SSRF). Root cause, vulnerable vs patched code, exploitation, detection, remediation.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:44.875224Z"}, {"uuid": "4d5b4eeb-f9dd-4ba2-a5aa-180669658152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv6wgayhs62p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-10T20:48:52.685989Z"}, {"uuid": "9af32683-3952-4e25-bfab-8fe17c9e033c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "published-proof-of-concept", "source": "Telegram/jKyqTiR42p1fQfjuVbswr3tKi4BJUSavKDz7PCHJhyIwgyXX", "content": "", "creation_timestamp": "2026-09-10T21:00:05.616363Z"}, {"uuid": "a2affbfd-dd81-494e-92f9-b743b4672dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "published-proof-of-concept", "source": "Telegram/jKyqTiR42p1fQfjuVbswr3tKi4BJUSavKDz7PCHJhyIwgyXX", "content": "", "creation_timestamp": "2026-09-11T00:00:28.260040Z"}, {"uuid": "d28d6cd6-0cd0-40ea-bb2d-26cd0aea87b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7p52od7q27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T04:11:07.841835Z"}, {"uuid": "e7c0e8d9-8abf-48fc-a619-84e9fba9c2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mv7wdcvpwz2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T06:19:53.755896Z"}, {"uuid": "94ddf884-450a-4155-b0a7-2e7abc0862a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvaegpwops2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-11T10:32:21.019200Z"}, {"uuid": "560efde0-220b-47c9-93d9-91b48222987b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62103", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvb7owcdmg2n", "content": "CVE-2026-62103 - everest forms\nThe Everest Forms add\u2011on for WordPress (versions up to 3.6.0) can be tricked into creating malicious objects, which could let an unauthenticated attacker execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#everestforms #wpeverest #CVE #infosec", "creation_timestamp": "2026-09-11T18:40:07.000548Z"}, {"uuid": "577230b1-1713-45dc-a9e0-e12b48b89944", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62105", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvbaarbvd42j", "content": "CVE-2026-62105 - themerex addons\nThe ThemeREX Addons plugin for WordPress (versions before 2.45.0) can be tricked by anyone on the internet to run unwanted code on your site. This could let an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#themerexaddons #themerex #CVE #infosec", "creation_timestamp": "2026-09-11T18:50:05.742810Z"}, {"uuid": "cd63f0bc-2868-49c8-a464-970f4430b196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62105", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvbemw4pqi22", "content": "\ud83d\udea8 CVE-2026-62105 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62105\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T20:08:28.269969Z"}, {"uuid": "b8c036a4-d37d-44a1-8bf9-f23dcd662b40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62112", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvbe64osey2o", "content": "\ud83d\udfe0 CVE-2026-62112 - High (7.6)\n\nEditor SQL Injection in Amelia <= 2.4.9 versions.\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-62112/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-11T20:00:12.861371Z"}, {"uuid": "6ff81c0a-f4c8-4fa5-aa8c-e27e138e79c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62103", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvbemoaql32y", "content": "\ud83d\udea8 CVE-2026-62103 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62103\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-11T20:08:19.962546Z"}, {"uuid": "3d779bc5-e641-4f3d-8c87-417fffcff0bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/true_secator/8565", "content": "\u041f\u043e\u0447\u0442\u0438 22 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0432 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-62911, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041e\u0440\u0430\u043d\u0436\u0435\u043c \u0426\u0430\u0435\u043c \u0438\u0437 DEVCORE. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Exchange Server 2016, Exchange Server 2019 \u0438 Exchange Server Subscription Edition (SE).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Microsoft, \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 Microsoft Exchange Server \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Exchange.\n\nMicrosoft \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-62911 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0435\u0435 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC-NL) \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 21 899 IP \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 - \u0432 \u0421\u0428\u0410 (6200) \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (5100). \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u0445 - 809.\n\n\u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (BSI) \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e (\u043a\u0430\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Heise), \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 85% \u0432\u0441\u0435\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u043e\u0449\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-09-12T04:00:05.240246Z"}, {"uuid": "d8c059d1-5407-483e-96b3-d5cfa116c170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:16.334711Z"}, {"uuid": "f9970571-d703-421f-b871-6e67a7665d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:17.522384Z"}, {"uuid": "dfe356dd-7fec-4fbd-abe3-5691874999c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://t.me/shimiscyberworld/1125", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-6229 \u2014 CVSS 7.2\nCVE-2026-6229: Royal Elementor Addons Plugin Vulnerable to SSRF\n\nCVE-2026-6229 \u2014 The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #server_side_request_forgery\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-6229 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:19.873742Z"}, {"uuid": "5caf148b-0bcd-4824-b72e-b0b9b5d7985a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6229", "type": "seen", "source": "https://t.me/shimiscyberworld/1125", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-6229 \u2014 CVSS 7.2\nCVE-2026-6229: Royal Elementor Addons Plugin Vulnerable to SSRF\n\nCVE-2026-6229 \u2014 The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057. This is due to insufficient validation of user-supplied URLs in\u2026\n\n\ud83d\udfe1 Medium\n\n#cve  #high_severity  #server_side_request_forgery\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-6229 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:08.669887Z"}, {"uuid": "963109d8-0abb-4c65-a2c3-ec960dc8ebc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6266", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n  \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n  \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n  \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n  \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n  \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n  \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n  \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n  \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n  \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n  \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n  \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n  \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n  \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n  \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n  \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n  \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n  \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n  \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.341396Z"}, {"uuid": "454198ef-6330-4c6f-ad3d-4b15316bf10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6261", "type": "seen", "source": "https://t.me/shimiscyberworld/1233", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-05\n\n\ud83d\udcca 52 vulnerabilities detected today \u2014 14 \ud83d\udd34 Critical, 38 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n  \u2022 CVE-2026-7411 (10) \u2014 Eclipse BaSyx RCE: Critical Path Traversal in Server SDK\n  \u2022 CVE-2026-5722 (9.8) \u2014 MoreConvert Pro WordPress Plugin Critical Authentication\u2026\n  \u2022 CVE-2025-13618 (9.8) \u2014 CVE-2025-13618: WordPress Mentoring Plugin Allows Admin\u2026\n  \u2022 CVE-2026-5294 (9.8) \u2014 CVE-2026-5294: Critical RCE in Geeky Bot WordPress Plugin\n  \u2022 CVE-2026-7823 (9.8) \u2014 CVE-2026-7823: Critical Command Injection in Totolink\u2026\n  \u2022 CVE-2023-54342 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Allows\u2026\n  \u2022 CVE-2023-54344 (9.8) \u2014 Eclipse Equinox OSGi RCE: Critical Vulnerability Exposes\u2026\n  \u2022 CVE-2026-7834 (9.8) \u2014 CVE-2026-7834: Critical Stack-Based Buffer Overflow in EFM\u2026\n  \u2026 and 6 more\n\n\ud83d\udd34 HIGH\n  \u2022 CVE-2023-54345 (8.8) \u2014 Frappe Framework ERPNext Sandbox Escape Allows RCE via\u2026\n  \u2022 CVE-2023-54348 (8.8) \u2014 ERPGo SaaS 3.9 CSV Injection Allows RCE via Vendor Fields\n  \u2022 CVE-2026-42434 (8.8) \u2014 OpenClaw Sandbox Escape (CVE-2026-42434) Allows Remote\u2026\n  \u2022 CVE-2026-42435 (8.8) \u2014 OpenClaw CVE-2026-42435: Shell Wrapper Vulnerability Allows\u2026\n  \u2022 CVE-2026-43530 (8.8) \u2014 OpenClaw Vulnerability CVE-2026-43530 Undermines Exec\u2026\n  \u2022 CVE-2026-43569 (8.8) \u2014 OpenClaw Authentication Bypass (CVE-2026-43569) Poses High\u2026\n  \u2022 CVE-2026-43571 (8.8) \u2014 CVE-2026-43571: OpenClaw Plugin Trust Bypass Opens Attack\u2026\n  \u2022 CVE-2026-6261 (8.8) \u2014 Betheme WordPress Arbitrary File Upload RCE (CVE-2026-6261)\n  \u2022 CVE-2026-7855 (8.8) \u2014 D-Link DI-8100 Buffer Overflow - CVE-2026-7855 Public\u2026\n  \u2022 CVE-2026-35228 (8.7) \u2014 Oracle MCP Server Helper Tool Vulnerability Allows\u2026\n  \u2026 and 28 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:34.510018Z"}, {"uuid": "f3be893c-4296-470e-85f7-a5dcf4ab844c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://t.me/true_secator/8565", "content": "\u041f\u043e\u0447\u0442\u0438 22 000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Microsoft Exchange \u0432 \u0441\u0435\u0442\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0432\u0441\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-62911, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u041e\u0440\u0430\u043d\u0436\u0435\u043c \u0426\u0430\u0435\u043c \u0438\u0437 DEVCORE. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Exchange Server 2016, Exchange Server 2019 \u0438 Exchange Server Subscription Edition (SE).\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u0442\u0440\u0435\u0431\u0443\u044e\u0449\u0438\u0445 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Microsoft, \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0445\u0432\u0430\u0442\u0430 \u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432 Microsoft Exchange Server \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438. \u0412 \u0438\u0442\u043e\u0433\u0435 \u043e\u043d \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Exchange.\n\nMicrosoft \u0435\u0449\u0435 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043f\u043e CVE-2026-62911 \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430 \u0435\u0435 \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u043e\u0432 (NCSC-NL) \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442-\u043a\u043e\u0434 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shadowserver \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 21 899 IP \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 Microsoft Exchange Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 - \u0432 \u0421\u0428\u0410 (6200) \u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (5100). \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438\u0445 - 809.\n\n\u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 (BSI) \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e (\u043a\u0430\u043a \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 Heise), \u0447\u0442\u043e \u043e\u043a\u043e\u043b\u043e 85% \u0432\u0441\u0435\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Exchange \u0432 \u0413\u0435\u0440\u043c\u0430\u043d\u0438\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u044b.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u043e\u043f\u044f\u0442\u044c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u0430\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u043c\u043e\u0449\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2026-09-13T00:00:57.366217Z"}, {"uuid": "e275f15b-e0cc-41fb-b800-a8c00534d771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvgncuqrcc24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T22:27:13.376962Z"}, {"uuid": "dc28b8b3-7bb9-4239-b697-19fa52e84a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62862", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvgqztu4em2u", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-62862: Typebot is an open-source chatbot builder\nCVSS 9.1 \u00b7 EPSS 0.5%\nhttps://beta.vulnsea.com/cve/CVE-2026-62862\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T23:33:50.093307Z"}, {"uuid": "fd1089eb-ddb3-4404-a4ea-1d96b2ac3679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0347", "content": "Microsoft heeft 4 kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk CVE-2026-69854 heeft een CVSS-score van 9,0. Een kwaadwillende die al over een geldige sessie beschikt, kan de kwetsbaarheid onder specifieke voorwaarden, zoals bepaalde protocolinstellingen of configuraties, misbruiken om zijn rechten binnen de applicatie te verhogen. Hierdoor kan de kwaadwillende toegang krijgen tot afgeschermde functionaliteiten of gegevens.\n\nDe kwetsbaarheid met kenmerk CVE-2026-62895 heeft een CVSS-score van 8,8. Een kwaadwillende kan een speciaal geprepareerde website hosten en een gebruiker ertoe verleiden deze te bezoeken. Vervolgens kan de kwaadwillende via verzoeken aan een kwetsbare lokaal draaiende service opdrachten uitvoeren met verhoogde rechten. Voor misbruik is geen authenticatie vereist, maar gebruikersinteractie is wel vereist. Succesvol misbruik kan leiden tot het verkrijgen van SYSTEM-rechten.\n\nDe kwetsbaarheid met kenmerk CVE-2026-77909 heeft een CVSS-score van 7,7. De kwetsbaarheid betreft onvoldoende beveiligde inloggegevens in Azure CycleCloud. Een geauthenticeerde kwaadwillende kan deze kwetsbaarheid via het netwerk misbruiken om informatie, waaronder inloggegevens, te verkrijgen.\n\n```\nSpring Cloud Azure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-69854 | 9,00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Arc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62895 | 8,80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-77909 | 7,70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-09-14T10:00:41.941013Z"}, {"uuid": "9e10e890-0472-4f85-b7ad-6c4085f67c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62721", "type": "seen", "source": "https://infosec.exchange/users/briankrebs/statuses/117271336645696354", "content": "Microsoft today released an out of band update that includes a security update to a vulnerability they first patched in August. I guess the first patch didn't work broadly enough or introduced more flaws (or both). According to MS, though, there aren't any signs this vulnerability is actively being exploited. MS just says \"The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix.\"\nhttps://support.microsoft.com/en-us/servicing/os/windows-11/2026/09/kb5129195-windows-11-24h2-25h2-security-update\nhttps://msrc.microsoft.com/update-guide/advisory/CVE-2026-62721", "creation_timestamp": "2026-09-14T20:43:13.524601Z"}, {"uuid": "06b372a6-045b-4f5a-b4a7-daa67330bf42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62895", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0347", "content": "Microsoft heeft 4 kwetsbaarheden verholpen in diverse Azure componenten. Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de categorie\u00ebn schade, zoals genoemd in onderstaande tabel.\n\nDe kwetsbaarheid met kenmerk CVE-2026-69854 heeft een CVSS-score van 9,0. Een kwaadwillende die al over een geldige sessie beschikt, kan de kwetsbaarheid onder specifieke voorwaarden, zoals bepaalde protocolinstellingen of configuraties, misbruiken om zijn rechten binnen de applicatie te verhogen. Hierdoor kan de kwaadwillende toegang krijgen tot afgeschermde functionaliteiten of gegevens.\n\nDe kwetsbaarheid met kenmerk CVE-2026-62895 heeft een CVSS-score van 8,8. Een kwaadwillende kan een speciaal geprepareerde website hosten en een gebruiker ertoe verleiden deze te bezoeken. Vervolgens kan de kwaadwillende via verzoeken aan een kwetsbare lokaal draaiende service opdrachten uitvoeren met verhoogde rechten. Voor misbruik is geen authenticatie vereist, maar gebruikersinteractie is wel vereist. Succesvol misbruik kan leiden tot het verkrijgen van SYSTEM-rechten.\n\nDe kwetsbaarheid met kenmerk CVE-2026-77909 heeft een CVSS-score van 7,7. De kwetsbaarheid betreft onvoldoende beveiligde inloggegevens in Azure CycleCloud. Een geauthenticeerde kwaadwillende kan deze kwetsbaarheid via het netwerk misbruiken om informatie, waaronder inloggegevens, te verkrijgen.\n\n```\nSpring Cloud Azure: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-69854 | 9,00 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure Arc: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-62895 | 8,80 | Verkrijgen van verhoogde rechten    | \n|----------------|------|-------------------------------------|\n\nAzure CycleCloud: \n|----------------|------|-------------------------------------|\n| CVE-ID         | CVSS | Impact                              |\n|----------------|------|-------------------------------------|\n| CVE-2026-77909 | 7,70 | Toegang tot gevoelige gegevens      | \n|----------------|------|-------------------------------------|\n\n```", "creation_timestamp": "2026-09-15T01:00:32.993252Z"}, {"uuid": "e247cf89-f066-464d-a8b0-602a1a781704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62382", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-62382.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:05.312371Z"}, {"uuid": "40f1838c-5cb2-47d6-9bb3-45e386291f35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62263", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvkln35svt2p", "content": "\ud83d\udea8 CVE-2026-62263 \u2014 CVSS 9.2 CRITICAL\n\nOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.2, WebAuthnAuthentication.d...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62263\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:07:47.091809Z"}, {"uuid": "2709d827-6d0e-421c-859d-35d1e8dca44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62379", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvklnd2dat2g", "content": "\ud83d\udea8 CVE-2026-62379 \u2014 CVSS 9.8 CRITICAL\n\nOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62379\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T12:07:55.623135Z"}, {"uuid": "a4a512f1-6c85-48f8-806f-3c6d7792efac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62832", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mvksgreqf72z", "content": "CVE-2026-62832 LegacyHive \u2014 Moving on to the next steps", "creation_timestamp": "2026-09-15T14:09:32.415933Z"}, {"uuid": "58b0cabe-f725-4c8a-88a8-e3e59d4fbaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62645", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:04.757114Z"}, {"uuid": "c02c54ce-ce3c-4ab7-94c1-86360e85dddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62646", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:06.901941Z"}, {"uuid": "61cc4176-bd1a-4f9f-b050-1a980f42ff62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62647", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:08.848224Z"}, {"uuid": "90b7241f-ab02-419f-815c-e33e3cb02dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62648", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:10.418891Z"}, {"uuid": "feca40cb-5872-4ed4-8704-7c9c2b5117ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62649", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:12.399575Z"}, {"uuid": "1785b5cc-f4a1-481a-9a35-ea8d537c2692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62650", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:14.321313Z"}, {"uuid": "2703ebb7-3133-4775-869d-e297a9736ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62652", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:16.264671Z"}, {"uuid": "84a2cbb0-602a-48dd-8041-58b8f9928bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62653", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:18.398352Z"}, {"uuid": "860904c6-0c95-4940-b3df-af6511b6258d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62654", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05", "content": "", "creation_timestamp": "2026-09-15T16:16:20.503816Z"}, {"uuid": "fdd2fc9e-d196-44d9-90e7-debb76eba033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62382", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-62382.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:03.040766Z"}, {"uuid": "df563ae1-7da4-4722-862c-4b9f9d2d8c76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62382", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-62382.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:03.090059Z"}, {"uuid": "7cc2b210-a8c3-4212-929e-caf669e9dd34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62101", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpw75ibvc22", "content": "CVE-2026-62101 - eduadmin booking\nThe EduAdmin Booking plugin for WordPress does not properly verify who is trying to log in, so anyone on the internet could sign in without a password. This could allow an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eduadminbooking #CVE #infosec", "creation_timestamp": "2026-09-17T15:00:09.694815Z"}, {"uuid": "3729a3aa-9c62-454e-be0e-6b921cb1cc9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpwqutjed24", "content": "CVE-2026-62104 - migratico lite\nVersions up to 2.6.8 of the Migratico Lite WordPress plugin can be accessed by anyone on the internet without logging in, allowing them to execute commands on your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#migraticolite #superweby #CVE #infosec", "creation_timestamp": "2026-09-17T15:10:04.885002Z"}, {"uuid": "98bf5e8f-8e37-428e-82df-9301d0cb2c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62108", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvpwqxhcyd2r", "content": "CVE-2026-62108 - headless single sign on\nThe Headless Single Sign On plug\u2011in for WordPress, up to version 1.7.0, does not properly verify who is trying to log in. This means someone without credentials could gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#miniorange #CVE #infosec", "creation_timestamp": "2026-09-17T15:10:07.798462Z"}, {"uuid": "2388f839-da49-4b8e-9462-6ddf0e890911", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62101", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpzxdt6do22", "content": "\ud83d\udea8 CVE-2026-62101 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Broken Authentication in EduAdmin Booking <= 5.4.2 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62101\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:07:23.152139Z"}, {"uuid": "06fff123-0a86-4eb0-bd43-97c67d09a11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62104", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpzxmqjdg2n", "content": "\ud83d\udea8 CVE-2026-62104 \u2014 CVSS 10 CRITICAL\n\nUnauthenticated Remote Code Execution (RCE) in Migratico Lite <= 2.6.8 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62104\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:07:32.259779Z"}, {"uuid": "2edf8fc1-a3ff-45a7-9750-2bf6385cd4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62108", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvpzxv2cj52j", "content": "\ud83d\udea8 CVE-2026-62108 \u2014 CVSS 9.8 CRITICAL\n\nUnauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62108\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-17T16:07:40.885476Z"}, {"uuid": "44f3247c-f7da-4061-b8fe-c8bf01990d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62672", "type": "published-proof-of-concept", "source": "https://github.com/getgrav/grav/security/advisories/GHSA-37f3-6p89-6qr9", "content": "", "creation_timestamp": "2026-09-17T18:35:26.051695Z"}, {"uuid": "90d3bb4d-91c3-4095-8b39-ea7c12ade5d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62382", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-62382.yaml", "content": "", "creation_timestamp": "2026-09-18T00:00:02.434163Z"}, {"uuid": "4b0e693f-ae28-454c-bf5a-5bc6e4afdee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvr3kbgovo2r", "content": "\ud83d\udea8 CVE-2026-62874 \u2014 CVSS 10 CRITICAL\n\nInsufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-62874\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T02:08:31.841296Z"}, {"uuid": "8f673e70-14a7-451e-ab09-b5d599eea525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvr5unoyvy22", "content": "CVE-2026-62874 - azure billing\nThe Azure Billing service does not properly check that data comes from a trusted source. This weakness could let an outsider pretend to be a legitimate user and obtain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#azurebilling #microsoft #CVE #infosec", "creation_timestamp": "2026-09-18T02:50:07.665892Z"}, {"uuid": "f5ee2da9-5897-48c6-8c31-fb28bdad6cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62874", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.887636Z"}, {"uuid": "b78cc64c-d7fe-4cca-afc0-5601cf47d808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62382", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-62382.yaml", "content": "", "creation_timestamp": "2026-09-19T00:00:05.323163Z"}, {"uuid": "93247c0f-6d11-4568-a922-d5423f821ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62943", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtyfggpu32n", "content": "CVE-2026-62943 - btrbk\nVersions 0.29.0 through 0.32.6 of the btrbk backup utility allow a user who connects via SSH to add extra commands after the expected backup command. This can let an attacker run any\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#btrbk #digint #CVE #infosec", "creation_timestamp": "2026-09-19T05:50:07.389916Z"}, {"uuid": "ec3d652d-1c90-4e36-a8f2-4cee8281b6e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62911", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mvwahautsp26", "content": "The latest update for #ManageEngine includes \"How to secure Exchange Server beyond the CVE-2026-62911 fix\" and \"#AgenticAI for ITOps: Is your organization ready for the security challenges?\".\n \n#ITSecurity #cybersecurity #ITSM https://opsmtrs.com/3BT50gZ", "creation_timestamp": "2026-09-20T03:19:38.166854Z"}, {"uuid": "29269a27-6e36-45a5-8aad-2fc27be12556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-6205", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-synology-diskstation-manager-dsm-", "content": "", "creation_timestamp": "2026-09-21T12:45:04.044401Z"}, {"uuid": "fe209157-5206-4456-a3a1-d0e28202eedc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6205", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvzshwm2f22i", "content": "\ud83d\udd17 CVE : CVE-2026-13623, CVE-2026-13635, CVE-2026-13639, CVE-2026-13666, CVE-2026-13673, CVE-2026-13683, CVE-2026-13684, CVE-2026-6205", "creation_timestamp": "2026-09-21T13:20:08.825329Z"}, {"uuid": "6fba7a17-d5c4-4d40-b5d0-3ee165288cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62866", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ak5zg67rbpopq", "content": "CVE-2026-62866 - Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`\nCVE ID : CVE-2026-62866\n \n Published : Sept. 21, 2026, 4:51 p.m. | 18\u00a0minutes ago\n \n Description : Dasel is a command-line tool and library for querying, modifying, and transforming data str...", "creation_timestamp": "2026-09-21T17:50:43.943606Z"}, {"uuid": "0efabb8f-8a8f-4d49-80d8-c1a48a9f8f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5y6mr2jed737j", "content": "CVE-2026-62371 - KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API\nCVE ID : CVE-2026-62371\n \n Published : Sept. 21, 2026, 5:17 p.m. | 23\u00a0minutes ago\n \n Description : KubeEdge is an open source system for extending native containerized applicati...", "creation_timestamp": "2026-09-21T17:58:43.805574Z"}, {"uuid": "aee6b1ab-6aed-4458-ab11-0dd4811d24ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62279", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mw3bfuhp5g2v", "content": "CVE-2026-62279 LubeLogger 7.1: authenticated users can copy records from vehicles they don't own via DuplicateRecordsToOtherVehicles, missing source auth check. No patch confirmed yet. Update to 1.6.8+ now. https://www.valtersit.com/cve/CVE-2026-62279/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-22T03:20:03.981502Z"}, {"uuid": "036f1b6e-aab8-4566-8bfa-224106d73114", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-62279", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117312533494084443", "content": "CVE-2026-62279 LubeLogger 7.1: authenticated users can copy records from vehicles they don't own via DuplicateRecordsToOtherVehicles, missing source auth check. No patch confirmed yet. Update to 1.6.8+ now. https://www.valtersit.com/cve/CVE-2026-62279/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-22T03:20:07.295100Z"}, {"uuid": "2268992b-0b5a-48db-8a67-0b787a5d72f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-62985", "type": "published-proof-of-concept", "source": "https://github.com/azu/request-filtering-agent/security/advisories/GHSA-r3r9-wp5j-pq5g", "content": "", "creation_timestamp": "2026-09-22T20:35:06.937530Z"}]}